ACS> User Setup

[Praveen Kumar]

When the user authenticates in ACS v3.3, a profile is created and stored under User Setup. When the employees leaves the company we have to delete this profile. We use external database which is Active Directory.

Questions

1) If the Active Directory account is deactivated, will the user be able to login because the credentials is saved in ACS?

2) Is there a way to expire these credentials like in 24 or 48hrs?

[Tarik Admani · Accepted solution]

In ACS3.3 you are able to expire the account also if the account is deactivated and the cached user in ACS is pointing to the windows database for authentication this should not allow the user in.

Here is where you can setup how long the account is active for:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/user/guide/u.html#wp273167

Thanks

Tarik