If you have a user exclusively accessing NetSuite with SSO, do they need to change their password due to expiry?

Nope

Only admins since SSO does not work with the Admin role