about ise 3.1 password period

[tjdwns4111]

I'm using ise 3.1, but is there any way to check the expiration date of each user?

If you log in 10 days before it expires, you will be alerted to change your password, but if you don't log in for 10 days, you won't know, so the user is often disabled.

If I upload the version, can I check the rest of the period?

[balaji.bandi]

If you log in 10 days before it expires, you will be alerted to change your password, but if you don't log in for 10 days, you won't know, so the user is often disabled.

this is bit tricky to answer this - since you setup user to send email prior to password expirty (user responsible to change as mentioned date) - if that is missed your account it locked and admin can make action

if that is not working then you need to make a policy not to expirty - that is only option i see for you here now.

more information check below guide :

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_3_1/b_ISE_admin_31_asset_visibility.html?bookSearch=true#id_111765

Note : i take this for Local users.

[hslai]

@tjdwns4111 ISE 3.2 added new attributes: passwordNeverExpires, accountNameAlias and daysForPasswordExpiration in ISE Internal User API so you may consider using a newer ISE release.