ISE | change password after reset

[Bruno Dinis]

Hello.

on ISE Guest Access, I've setup change of password required after the first login.

It works very good. After the 1st login the end user is invited to change it normally.

What happen when the end user loses his password, he/she asks for a reset, although, after the reset a new password is given.

after the login with the new password the user is not invited anymore to change the password and I don't know how to configure this option to appear to the users.

can anybody help?

Thank you

[Jaderson Pessoa]

Hello, is necessary to mark the box "change password at login" under user configuration.

[Jason Kunst]

If this question is for 2.7 password recovery then No it is not.

They are 2 separate issues. One is to recover password, the other is to change it after login so the sponsor doesn’t know your password as they had access to it when it was created

[Bruno Dinis]

that is checked!
As I said in the thread, initially the user gets prompted to change the password. But if he forgets, the admin resets the password, and then the user is not prompted to change it again.

[balaji.bandi]

what ISE version is this :

Look at tthe steps for the Guest password recovery :

https://community.cisco.com/t5/security-documents/ise-2-7-guest-access-management-features/ta-p/3958846

[Jason Kunst]

Sorry if you recovered the password then only you know it. Then why would you need to change it yet again?

[Bruno Dinis]

Jason, I'm administrating the Sponsor Portal.

A user tells me that he forgot the password.
I go to the Sponsor Portal, and I reset the password. Then I give to him the new password, something like "4#sxSRszk"

if the user wants to change the password, how should he do?

[Jason Kunst · Accepted solution]

---

@Bruno Dinis wrote:

Jason, I'm administrating the Sponsor Portal.

A user tells me that he forgot the password.
I go to the Sponsor Portal, and I reset the password. Then I give to him the new password, something like "4#sxSRszk"

if the user wants to change the password, how should he do?

---

OK thank you, likely by design for now. Please reach out to the TAC and see if they think it can be covered under defect, otherwise its enhancement and you can reach out to http://cs.co/ise-feedback to ask for improvements