Hi - We leverage temporal group membership to control the length of time a user can remain password allowed before being flipped back to smartcard required.

When we need to reset the edsva-ScheduledLink-Endtime  for entries in the group, we clear that value…