We use Cisco ISE to create user credentials for BYOD access.  We do this to avoid using AD (which we use for corporate devices) so that when a forced AD credential change occurs (due to security policy) that a user not changing their password on the...