Anyconnect VPN Password Chnage Promt from ASA 5580

[sailcmodc]

Dear All,

We have two  ASA 5580 in fail-over mode. Our users connects to VPN using Anyconnect.

This VPN login is authenticated from AD (For domain users: who logs in to domain) 

But there are such users in AD who does not log into AD but uses VPN to connect into some particular servers.

Is there any way to configure, so that those users can have Prompt for Password change (as per AD Password Expiration Policy) and change their password.

ASA ios: asa841-smp-k8.bin

Thanks & Regards,

SAILCMO

[Peter Koltl]

You will need the

password-management

command under the Tunnel-Group.

See

https://www.cisco.com/c/en/us/support/docs/network-management/remote-access/116757-config-asa-remote-00.html#anc10

[Peter Koltl]

Secure LDAP is required too.

https://community.cisco.com/t5/security-documents/password-management-with-ldap-vs-radius-for-vpn-users/ta-p/3147278