Chapter 8 Managing Users and Identity Stores

Managing Internal Identity Stores

Table 8-5 Users and Identity Stores > Internal Identity Store > User Properties Page (continued)

Option

Description

 

 

Description

(Optional) Description of the user.

 

 

Identity Group

Click Select to display the Identity Groups window. Choose an identity group and click

 

OK to configure the user with a specific identity group.

 

 

Password Information

This section of the page appears only when you create an internal user.

Password must contain at least 4 characters

Password Type

Displays all configured external identity store names, along with Internal Users which is

 

the default password type. You can choose any one identity store from the list.

 

During user authentication, if an external identity store is configured for the user then

 

internal identity store forwards the authentication request to the configured external

 

identity store.

 

If an external identity store is selected, you cannot configure a password for the user. The

 

password edit box is disabled.

 

You cannot use identity sequences as external identity stores for the Password Type.

 

You can change Password Type using the Change Password button located in the Users

 

and Identity Stores > Internal Identity Stores > Users page.

 

 

Password

User’s password, which must comply with the password policies defined under System

 

Administration > Users > Authentication Settings.

 

 

Confirm Password

User’s password, which must match the Password entry exactly.

 

 

Change Password on next login

Check this box to start the process to change the user’s password when the user logs in

 

next time, after authentication with the old password

 

 

Enable Password Information

This section of the page appears only when you create an internal user.

Password must contain 4-32 characters

Enable Password

(Optional) Internal user’s TACACS+ enable password, from 4 to 32 characters. You can

 

disable this option. See Authentication Information, page 8-5for more information.

 

 

Confirm Password

(Optional) Internal user’s TACACS+ enable password, which must match the Enable

 

Password entry exactly.

 

 

User Information

If defined, this section displays additional identity attributes defined for user records.

Creation/Modification Information

This section of the page appears only after you have created or modified an internal user.

 

 

User Guide for Cisco Secure Access Control System 5.3

 

 

 

 

 

 

OL-24201-01

 

 

8-13

 

 

 

 

 

Page 165
Image 165
Cisco Systems OL-24201-01 Identity Stores Internal Identity Stores Users, Administration Users Authentication Settings