You can configure password expiration for admins on the Administrator Management page (Administration > Administrator Management > Administrators Management).

If you are subscribed to ZIdentity, the ZIdentity Administration link redirects you to the ZIdentity Admin Portal where admins can be managed. To learn more, see What Is ZIdentity?

Accessing Password Management

If you're using the Zscaler-hosted admin database to authenticate admins, you can enable password expiration for all admins logging in to the Zscaler Cloud & Branch Connector Admin Portal.

Accessing SAML Authentication for Administrators

You can authenticate admins via SAML using an external database rather than the admin database in the Cloud & Branch Connector Admin Portal. The Zscaler service supports identity provider authenticating admins using SAML initiated by the identity provider (IdP). You can integrate admin authentication with your existing two-factor authentication solution. The Zscaler service supports SAML 2.0 and later. To learn more, see Configuring SAML for Admins.

The Zscaler service doesn't enforce password expiration for external databases that use SAML.