Chat now with support
Chat with Support

Identity Manager 8.1.4 - Administration Guide for Connecting to SAP R/3

Managing SAP R/3 environments Setting up SAP R/3 synchronization Basic data for managing an SAP R/3 environment Basic data for user account administration SAP systems SAP clients SAP user accounts SAP groups, SAP roles, and SAP profiles SAP products Providing system measurement data Reports about SAP systems Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Using password policies

The SAP R/3 password policy is predefined for SAP R/3. You can apply this password policy to SAP user accounts (SAPUser.Password) of an SAP client.

If the clients’ password requirements differ, it is recommended that you set up your own password policies for each client.

Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.

The password policy that is to be used for a user account is determined in the following sequence:

  1. Password policy of the account definition of the user account.

  2. Password policy of the manage level of the user account.

  3. Password policy for the client of the user account.

  4. The One Identity Manager password policy (default policy).

IMPORTANT: If you do not use password policies that are specific to the target system, the One Identity Manager password policy default policy applies. In this case, ensure that the default policy does not violate the target systems requirements.

To reassign a password policy

  1. In the Manager, select the SAP R/3 | Basic configuration data | Password policies category.

  2. Select the password policy in the result list.
  3. Select the Assign objects task.
  4. Click Add in the Assignments section and enter the following data.

    Table 34: Assigning a password policy

    Property

    Description

    Apply to

    Application scope of the password policy.

    To specify an application scope

    1. Click next to the field.
    2. Select one of the following references under Table:
      • The table that contains the base objects of synchronization.
      • To apply the password policy based on the account definition, select the TSBAccountDef table.
      • To apply the password policy based on the manage level, select the TSBBehavior table.
    3. Under Apply to, select the table that contains the base objects.
      • If you have selected the table containing the base objects of synchronization, next select the specific target system.
      • If you have selected the TSBAccountDef table, next select the specific account definition.
      • If you have selected the TSBBehavior table, next select the specific manage level.
    4. Click OK.

    Password column

    The password column's identifier.

    Password policy

    The identifier of the password policy to be used.

  5. Save the changes.

To change a password policy's assignment

  1. In the Manager, select the SAP R/3 | Basic configuration data | Password policies category.

  2. Select the password policy in the result list.
  3. Select the Assign objects task.
  4. In the Assignments pane, select the assignment you want to change.
  5. From the Password Policies menu, select the new password policy you want to apply.
  6. Save the changes.

Editing password policies

To edit a password policy

  1. In the Manager, select the SAP R/3 | Basic configuration data | Password policies category.

  2. Select the password policy in the result list and select Change master data.

    - OR -

    Click in the result list.

  3. Edit the password policy's master data.
  4. Save the changes.
Detailed information about this topic

General master data for password policies

Enter the following master data for a password policy.

Table 35: Master data for a password policy

Property

Meaning

Display name

Password policy name. Translate the given text using the button.

Description

Text field for additional explanation. Translate the given text using the button.

Error Message

Custom error message generated if the policy is not fulfilled. Translate the given text using the button.

Owner (Application Role)

Application roles whose members can configure the password policies.

Default policy

Mark as default policy for passwords.

NOTE: The One Identity Manager password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts, or system users.

Policy settings

Define the following settings for a password policy on the Password tab.

Table 36: Policy settings

Property

Meaning

Initial password

Initial password for newly created user accounts. The initial password is used if a password is not entered when you create a user account or if a random password is not generated.

Password confirmation

Reconfirm password.

Minimum Length

Minimum length of the password. Specify the number of characters a password must have.

Max. length

Maximum length of the password. Specify the number of characters a password can have. The maximum permitted value is 256.

Max. errors

Maximum number of errors. Set the number of invalid passwords attempts. Only taken into account when logging in to One Identity Manager.

This data is only taken into account if the One Identity Manager login was through a system user or employee based authentication module. If a user has reached the number of maximum failed logins, the employee or system user can no longer log in to One Identity Manager.

You can use the Password Reset Portal to reset the passwords of employees and system users who have been blocked. For more detailed information, see the One Identity Manager Web Portal User Guide.

Validity period

Maximum age of the password. Enter the length of time a password can be used before it expires.

Password history

Enter the number of passwords to be saved. If, for example, a value of 5 is entered, the user's last five passwords are stored.

Minimum password strength

Specifies how secure the password must be. The higher the password strength, the more secure it is. The value 0 means that the password strength is not tested. The values 1, 2, 3 and 4 specify the required complexity of the password. The value 1 represents the lowest requirements in terms of password strength. The value 4 requires the highest level of complexity.

Name properties denied

Specifies whether name properties are permitted in the password. If this option is set, name properties are not permitted in passwords. The values of these columns are taken into account if the Contains name properties for password check option is set. In the Designer, adjust this option in the column definition. For more detailed information, see the One Identity Manager Configuration Guide.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating