CA Identity Portal 14.1 Demo environment.
When goto Endpoints->Active Directory, we can add AD group into a user.
When select an AD group, Portal show/display a "Expiry Date".
Q. This "Expiry Date" is defined in which form or this field is defined where ?
Q. Can this defined this "Expiry Date" field in other tab like "Applications" or "Roles" tab when a user make a request ?
Q. Once we set the 'Expiry Date", will Identity Portal automatically remove the AD group from user when the date reach ?
Please refer to the following doc
Active Directory Time Bound Membership - CA Identity Management & Governance Connectors - CA Technologies Documentation
This attributes was defined by Microsoft Active directory so it is subject to what AD is configured but not IP.