Creating Custom Attribute for Dynamic Reauthorization Scheduler

[rezaalikhani]

Hi everyone,

As you may be aware, Cisco ISE 3.4 Patch 1 introduces the Dynamic Reauthorization Scheduler feature. To implement this, we need to:

1. Define a string attribute in the format: YYYY-MM-DDThh:mm:ss+timezone (e.g., 2024-12-31T23:59:59+00:00).

2. Reference this attribute in the corresponding Authorization Profile.

My question: Could someone please guide me on how to create this custom attribute in ISE?

Any insights or documentation references would be greatly appreciated!

Thanks

[Arne Bier]

I had a play with this and gave up after a few hours of guessing my way around. The documentation is not helpful at all.

I tried creating a User dictionary item, with a static value of a certain cut off point.

Then apply this to the AuthZ Result

I have had varying luck with this - either ISE tells me it can't find the Authorization Profile (because of this change I made above), or it says this

Either way, this is the most arcane method of specifying a dynamic authorization .. can't Cisco think of something more user friendly? Or at least, document things properly?

[rezaalikhani]

@Arne Bier I think adding tones of new features without good documentation to implement them properly, is useless...