Can Cisco ISE Internal User be Notified when Password will be Expired?

[Arie --]

Hi,

In Cisco ISE 2.3, can the internal user account be notified by email notification when the their password lifetime will be expired?

What does need to configure in Cisco ISE for the email notification works?

I have create an account and fill the email address. SMTP also set. 

And in User Authentication Settings, I set 'Disable user account after x days if password was not changed' and 'Display reminder x days prior to password expiration'.

Thank you

Arie

[Flavio Miranda]

Hi @Arie --

 Display remainder will do the job.

-If I helped you somehow, please, rate it as useful.-

[Arie --]

Hi,

Thanks for your answer.

And at where should I configure how long the internal user password need to be changed periodically? Is it in  'Disable user account after x days if password was not changed' ?

[Flavio Miranda]

 That's should do the job.

-If I helped you somehow, please, rate it as useful.-

[Arie --]

Hi,

So, if I set "Disable user account after 3 days if password was not changed" and "Display reminder 2 days prior to password expiration", is it means that the internal user password will be expired in 3 days after the account created and the user will be notified 2 days before the password expired? Is it correct?

Thank you

[Flavio Miranda · Accepted solution]

Thats correct. Go for it.

-If I helped you somehow, please, rate it as useful.-

[Arie --]

Hi,

Thank you for your answer. It works.

Btw, does the email notification message can be modified?

The default message that I got is:

"Your network access password will expire on Tue Jan 30 12:53:56 WIB 2018. Please contact your system administrator for assistance . "

Thank you

[jan.murin]

I have a similar question. The password expiration email is sent to the user with an information about specific time when the password will expire (for example 9AM). However the ISE will not disable the account during that time. The user account is enabled till midnight. I think that the information about specific time is not correct.

Anybody noticed the same issue?

Regards,

Jan