ISE 2.1 - GUI login user expire notification/change password

[Looi Siew Key]

Hi,

We have multiple login user for ISE GUI, the password policy expire set as 60 days and email reminder sent by 60 days i believe.

Other than email reminder for password expire notification, any notification can be shown whenever user login to their own account GUI and prompt or shown the password expiration message.

For password change, whenever user account reach 60 days of password expiration, it should prompt password change page while login fail via ISE GUI login, but we facing issue that account is locked once 60 days reach for all user account.

Kindly advise if you facing the same issue.

[Mohammed al Baqari]

Both aren't achievable.

If the password expires, the admin needs to reset the password
There is no notification on login that x days remaining for expiry (like
windows)

[Looi Siew Key]

Hi Mohammed,

As from my testing it comes with the same result from your statement, does Cisco stated in any ISE documentation which expire user account is unable to change password themselves?

[Mohammed al Baqari]

I didn't see it but I tested it.