Sanity check on internal users password lifetime behavior

[mabriand]

Hello,

I've received a request from someone whose goal is to be able to set  "Disable user account after  X days if password was not changed" only for internal users with the password type "internal users".

Customer also has other internal users with password type "OTP" (pointing to a RADIUS token Server) and customer would like to prevent these accounts from being disabled due to the above mentioned setting.

I believe this this is not possible since the password lifetime settings on ISE are global for all internal users irrespective of password type. Can you kindly confirm?

Best Regards,

Martin

[Nidhi · Accepted solution]

Password lifetime is a global setting on ISE today and we do not have user level configuration for this.

Request you to raise this request via your account team.

Thanks,

Nidhi

[mabriand]

Thanks Nidhi,

Much appreciated.

Martin