topic Creating Custom Attribute for Dynamic Reauthorization Scheduler in Network Access Control

Creating Custom Attribute for Dynamic Reauthorization Scheduler

rezaalikhani — Mon, 30 Jun 2025 07:31:47 GMT

Hi everyone,

As you may be aware, Cisco ISE 3.4 Patch 1 introduces the Dynamic Reauthorization Scheduler feature. To implement this, we need to:

Define a string attribute in the format: YYYY-MM-DDThh:mm:ss+timezone (e.g., 2024-12-31T23:59:59+00:00).
Reference this attribute in the corresponding Authorization Profile.

My question: Could someone please guide me on how to create this custom attribute in ISE?

Any insights or documentation references would be greatly appreciated!

Thanks

Re: Creating Custom Attribute for Dynamic Reauthorization Scheduler

Arne Bier — Mon, 30 Jun 2025 23:09:33 GMT

I had a play with this and gave up after a few hours of guessing my way around. The documentation is not helpful at all.

I tried creating a User dictionary item, with a static value of a certain cut off point.

Then apply this to the AuthZ Result

I have had varying luck with this - either ISE tells me it can't find the Authorization Profile (because of this change I made above), or it says this

Either way, this is the most arcane method of specifying a dynamic authorization .. can't Cisco think of something more user friendly? Or at least, document things properly?

Re: Creating Custom Attribute for Dynamic Reauthorization Scheduler

rezaalikhani — Tue, 01 Jul 2025 06:08:19 GMT

@Arne Bier I think adding tones of new features without good documentation to implement them properly, is useless...