https://community.cisco.com/t5/network-access-control/acs-5-6-change-password-on-next-login/m-p/3040172#M25881 <P>I have a question regarding the user stores in Cisco ACS 5.6. We currently use the ACS User Identity Store to create users which use radius authentication to login to our VPN via the AnyConnect client. We use a Cisco ASA for the VPN server. I would like to force a certain group of ACS users to change their password the next time they login to the VPN. In their ACS account there is a "Change Password On Next Login" box that I have checked on a particular user to test this option. I logged into the VPN and was not prompted to change any password. I logged off the VPN and back and still did not get prompted to change the password. Am I missing something with this feature?</P> Mon, 11 Mar 2019 07:49:22 GMT jason crockett 2019-03-11T07:49:22Z https://community.cisco.com/t5/network-access-control/acs-5-6-change-password-on-next-login/m-p/3040172#M25881 <P>I have a question regarding the user stores in Cisco ACS 5.6. We currently use the ACS User Identity Store to create users which use radius authentication to login to our VPN via the AnyConnect client. We use a Cisco ASA for the VPN server. I would like to force a certain group of ACS users to change their password the next time they login to the VPN. In their ACS account there is a "Change Password On Next Login" box that I have checked on a particular user to test this option. I logged into the VPN and was not prompted to change any password. I logged off the VPN and back and still did not get prompted to change the password. Am I missing something with this feature?</P> Mon, 11 Mar 2019 07:49:22 GMT https://community.cisco.com/t5/network-access-control/acs-5-6-change-password-on-next-login/m-p/3040172#M25881 jason crockett 2019-03-11T07:49:22Z https://community.cisco.com/t5/network-access-control/acs-5-6-change-password-on-next-login/m-p/3040173#M25885 <P>Hi Jason,</P> <P>In case you are using ASA for terminating VPN, make sure the password-management is configured on the ASA for the specific tunnel-group.This document should help you in understanding password change feature and the configuration that is needed on the <G class="gr_ gr_13 gr-alert gr_gramm gr_inline_cards gr_run_anim Style multiReplace" id="13" data-gr-id="13">ASA .</G></P> <P><A href="https://supportforums.cisco.com/document/11934926/password-management-ldap-vs-radius-vpn-users#ASA_does_not_support_password_management_under_the_following_conditions">https://supportforums.cisco.com/document/11934926/password-management-ldap-vs-radius-vpn-users#ASA_does_not_support_password_management_under_the_following_conditions</A></P> <P>Here is another link for your reference:-<BR /><A href="https://supportforums.cisco.com/discussion/10586411/vpn-prompt-user-change-ssl-client-password">https://supportforums.cisco.com/discussion/10586411/vpn-prompt-user-change-ssl-client-password</A></P> <P>Regards<BR />Dinesh Moudgil</P> <P>P.S. Please rate helpful posts.</P> Mon, 03 Jul 2017 04:38:30 GMT https://community.cisco.com/t5/network-access-control/acs-5-6-change-password-on-next-login/m-p/3040173#M25885 Dinesh Moudgil 2017-07-03T04:38:30Z