topic Re: cisco ISE TACACS User authentication setting in Network Access Control

cisco ISE TACACS User authentication setting

ssocsupport — Wed, 07 Aug 2024 06:11:28 GMT

Recently got a requirement that Users need to be set with password length of 12 characters length and Expiration time of 180 days. The password policy is already in place for other users with different password length and Expiration time.

I would like to know if we can create multiple password policy and map it to the user in TACACS. Below are the steps where I see the options.

Administration ---> Identity Management ---> User authentication settings ---> Password policy

Re: cisco ISE TACACS User authentication setting

Rob Ingram — Wed, 07 Aug 2024 06:32:31 GMT

@ssocsupport I think password policy is global for all users in the local ISE database. This password policy would not apply if you are using an External Identity Source (AD/LDAP etc), those directory services would have their own password policies.

Re: cisco ISE TACACS User authentication setting

ssocsupport — Wed, 07 Aug 2024 06:36:03 GMT

@Rob Ingram Thank you for the quick response. So, I believe I cannot set a separate password policy for a group of users in the local ISE database.

Re: cisco ISE TACACS User authentication setting

Rob Ingram — Wed, 07 Aug 2024 06:40:06 GMT

@ssocsupport correct.