topic Re: Sanity check on internal users password lifetime behavior in Network Access Control

Sanity check on internal users password lifetime behavior

mabriand — Thu, 22 Feb 2018 16:15:43 GMT

Hello,

I've received a request from someone whose goal is to be able to set "Disable user account after X days if password was not changed" only for internal users with the password type "internal users".

Customer also has other internal users with password type "OTP" (pointing to a RADIUS token Server) and customer would like to prevent these accounts from being disabled due to the above mentioned setting.

I believe this this is not possible since the password lifetime settings on ISE are global for all internal users irrespective of password type. Can you kindly confirm?

Best Regards,

Martin

Re: Sanity check on internal users password lifetime behavior

Nidhi — Fri, 23 Feb 2018 08:07:38 GMT

Password lifetime is a global setting on ISE today and we do not have user level configuration for this.

Request you to raise this request via your account team.

Thanks,

Nidhi

Re: Sanity check on internal users password lifetime behavior

mabriand — Fri, 23 Feb 2018 09:11:31 GMT

Thanks Nidhi,

Much appreciated.

Martin