Device Admin Password Portal

russell.sage — Wed, 12 Jul 2023 07:31:13 GMT

Has anyone been clever enough to use ISE to allow users reset their own device TACACs password?

I have been looking the ISE API but don't see an option there. We are large corporation with a lot of operational staff. It would be extremely handy to allow them to reset their own TACACS/RADIUS password.

Re: Device Admin Password Portal

Damien Miller — Wed, 12 Jul 2023 15:09:12 GMT

The API's are there to do this under the network device topic. You would still have to make a portal of some kind of run calls to the API or some other small application.
https://developer.cisco.com/docs/identity-services-engine/latest/#!networkdevice

You can also grab the postman collection Thomas put together if you want to easily test it. (ISE 2.7 I believe)
https://developer.cisco.com/codeexchange/github/repo/1homas/ise-postman-collections/

Or a collection put together for 3.0+
https://www.postman.com/ciscodevnet/workspace/workspace~18f89f0f-6abe-482f-bee8-1c3e50a3d448/collection/15368436-b3a1665d-c7b8-4e14-98d3-180a461dcb1b

The tacacs password is under tacacsSettings > sharedSecret
The radius password is under authenticationSettings > radiusSharedSecret

topic Device Admin Password Portal in Network Access Control

Device Admin Password Portal

Re: Device Admin Password Portal