topic Re: How to enforce basic password rules in SAP ? in Application Development and Automation Discussions

How to enforce basic password rules in SAP ?

Former Member — Mon, 07 Nov 2016 11:11:46 GMT

Hello SAP lovers and experts,

I'm new to SAP BC and I have to apply some security rules to passwords, I inserted below what was asked and how I applied it. Can anyone tell me if I applied the proper rules ? I often used USR40, did I use it right ? Also, should I set the rules in the default profile or instance, what's the difference ?

8 characters password login/min_password_lng
different than the user ID or his name USR40 filled with user IDs and names
Atleast one char and letter, do not use the smae character in a row login/min_password_letters,login/min_password_digits and USR40 (*AAA*, *BBB*, *CCC*...)
Not end or start with a letter USR40 (1*, 2*, 3*.... *1, *2, *3...)
Different than the last 5passwords login/password_history_size.
No personnal data like phone, birth of place ... USR40 ?
Change every 3 month login/password_expiration_time
Apply at next logon login/password_compliance_to_current_policy

Re: How to enforce basic password rules in SAP ?

Former Member — Mon, 07 Nov 2016 11:25:11 GMT

please check this link-

https://help.sap.com/saphelp_nw70/helpdata/en/22/41c43ac23cef2fe10000000a114084/frameset.htm

Re: How to enforce basic password rules in SAP ?

Former Member — Mon, 07 Nov 2016 13:27:35 GMT

Thanks, that was great help !

I'm still wondering about those two points :

Password can NOT contain the user name or ID
Password should not contain infos like phone number, date of birth...

I can use USR40, but I would have to update it for each new user, isn't there a way to prevent it automatically ?