ISE Neverexpire

[wchik]

Hi Experts,

Wanted to ask whether ISE supports neverexpire accounts for users?  Customer wants to have TACACS users to have neverexpire accounts.

Thanks,

Wendy

[hslai · Accepted solution]

Yes, that should work. There is a known issue that the users might get reminders on account expiration -- CSCvf30591.

[wchik]

Thanks!  Do you know what is the first version supporting the neverexpire feature?  Is it ISE2.2 with global setting?  And then have each user have an expiry date set?

Regards,
Wendy

[hslai]

Since ISE 1.0, it has been possible to make an internal user account not to expire.

Prior to ISE 2.1, we configure the Password Lifetime and Lock/Suspect Account With Incorrect Login Attempts in the Password Policy under Administration > Identity Management > Settings > User Authentication Settings.

ISE 2.1 introduces Account Disable Policy globally and for individual user accounts and that has additional options to influence when an account will expire.