Hello All,
I recently enabled changing expired passwords while connecting via Cisco Anyconnect using ASDM via this process: Connect to the ADSM > Configuration > Remote Access VPN > Network Client remote Access > AnyConnect Connection Profile > Select the one for AnyConnect > Edit > Advanced > General > Password Management > Enable Password Management > Select to notify user the amount of days before his/her password expires > OK > Apply > File > Save running configuration to flash.
I did so for both our non-DUO enabled connection profile, and our DUO-enabled connection profile. When testing, it allowed us to successfully change expired Windows passwords when logging on with non-DUO enabled accounts. However, for DUO-enabled accounts, if a user attempts to log in and with Windows account is expired it just redirects users back to the sign-on screen instead of prompting them to change their password. Is there any extra considerations or configuration changes I need to make in order to get password change due to password expiry to work with DUO-enabled accounts?
Sincerely,
Scott B.