Device Admin Password Portal

[russell.sage]

Has anyone been clever enough to use ISE to allow users reset their own device TACACs password?

I have been looking the ISE API but don't see an option there. We are large corporation with a lot of operational staff. It would be extremely handy to allow them to reset their own TACACS/RADIUS password.

[Damien Miller · Accepted solution]

The API's are there to do this under the network device topic. You would still have to make a portal of some kind of run calls to the API or some other small application. 
https://developer.cisco.com/docs/identity-services-engine/latest/#!networkdevice

You can also grab the postman collection Thomas put together if you want to easily test it. (ISE 2.7 I believe)
https://developer.cisco.com/codeexchange/github/repo/1homas/ise-postman-collections/

Or a collection put together for 3.0+
https://www.postman.com/ciscodevnet/workspace/workspace~18f89f0f-6abe-482f-bee8-1c3e50a3d448/collection/15368436-b3a1665d-c7b8-4e14-98d3-180a461dcb1b

The tacacs password is under tacacsSettings > sharedSecret
The radius password is under authenticationSettings > radiusSharedSecret