Easy Connect user logoff

[rovargas]

It is well know and very much documented the limitation with user LogOff when using Easy Connect.

When I demo it, even if I disconnect and reconnect the Windows endpoint, ISE keeps recognizing the previously logged user and jumps from limited access to full access even if the user has not yet logged in the Windows endpoint.

Is there any way to manually purge the user info in ISE logs so that we stay in limited access until the user logs in?

[hslai · Accepted solution]

ISE 2.2 live sessions view has it as an CoA action to terminate a PassiveID session. Else, you may use Using API calls for Session Management. It's also shown in Page 37 of the lab exercise Easy Connect in ISE JumpStart Visibility Lab.