Password expiring warning with AD

[Cantor, Scott]

On 2/15/16, 8:25 PM, "users on behalf of joller lee" <users-bounces at shibboleth.net on behalf of joller.lee at gmail.com> wrote:



>I believe it's possible to fulfill my need with a scripted predicate in expiring-password-intercept-config.xml solely, but I don't know how to do it presently.

I think maybe you could just use the existing example as is, you would just specify the right parsing format, attribute name, and slide the evaluation window to account for the fact that it's 180 days off of the actual expiration time.

The systemTimeOffset of -14 days basically says that the "time to start notifying" is 14 days before the value of the parsed date/time in the attribute.

I think the equivalent, if the value is 180 days from the expiration, would be to set it to +166 days. No script needed, I think.

-- Scott