Cisco ISE employee Wi-Fi authentication with AD as identity source

[Andrei Ivanko]

Hello. Our client want to inmplement Wi-Fi acces with Cisco ISE. He want to use AD as identity source for ISE. But by corporate security policy users must change his password once per month. This is working well for windows machines, but the users who has only Android and iOS tablets is not very convinient to change password. Is any way to change user password in AD on ISE portal? If not, may be we can use ISE internal database for this? May be there is another way to implement this?  

[Jason Kunst · Accepted solution]

You might be able to use this concept only for internal accounts however. I am checking but don’t think it works with Active directory
http://cs.co/ise-byod
look for UCP
https://community.cisco.com/t5/identity-services-engine-ise/ise-password-change-portal-ucp-with-my-devices-portal/td-p/3475680

[hslai]

Jason Kunst is correct that the changing passwords in ISE portals are not available for external ID stores today.

Access the Command-Line Interface to Change the Enable Password would work for AD users, however.