@Override
    public boolean isParticipating(final SingleSignOnParticipationRequest ssoRequest) {
        val token = ssoRequest.getRequestParameter(PasswordManagementService.PARAMETER_PASSWORD_RESET_TOKEN);
        try {
            if (token.isPresent() && StringUtils.isNotBlank(token.get())) {
                val ticket = ticketRegistrySupport.getTicketRegistry().getTicket(token.get(), TransientSessionTicket.class);
                LOGGER.trace("Token ticket [{}] is valid. SSO will be disabled to allow password-resets", ticket);
                return false;
            }
        } catch (final Exception e) {
            LOGGER.trace("Token ticket [{}] is not found or has expired. SSO will not be disabled", token);
        }
        return true;
    }
This is {@link PasswordManagementSingleSignOnParticipationStrategy}.

@author Julien Huon
@since 6.3.0
support/cas-server-support-pm-webflow/src/main/java/org/apereo/cas/pm/web/flow/PasswordManagementSingleSignOnParticipationStrategy.java