Exam 300-715 topic 1 question 162 discussion

When dynamic authorization is enabled in the AAA server group, ISE can interact with the configured AAA servers to perform the following actions: Change Authorization Policy: ISE can dynamically change the authorization policy for a user or device during a session. This allows ISE to modify the access privileges based on factors such as time of day, location, user behavior, or other contextual information. Re-authenticate Users: ISE can trigger a re-authentication process for users to reconfirm their identity and validate their access rights. This can be useful in scenarios where the user's access needs to be re-evaluated periodically or in response to certain events or conditions.

RFC 3576 and its successor RFC 5176 defined a new enhancement to RADIUS known as Dynamic Authorization Extensions to RADIUS, more commonly called Change of Authorization (CoA).