topic Re: Password Policy in DevOps and System Administration Forum

Password Policy

TMASaphir — Fri, 10 Nov 2023 19:02:56 GMT

Hello SAP experts,

I am working on password policy.

I would to implement the following requirement :

Password MUST contain characters from three of the four following rules: 

Upper case letters (A through Z) 

Lowercase letters (a through z) 

Base numbers (0 through 9) 

Non-alphabetic characters (special characters, for example: !, $, #, ~) 

I can implement 3 or 4 rules but i do not know to implement "if the password fulfill whatever 3 of the 4 rules, then the password is OK".

Do you know how to implement this?

Other question, do you know if there is a user exit to check the new password entered by the user to add some specific checks on the password?

For example, if the new password contain the sap user id of the current user then display error message and block save of the password

thank you a lot

Re: Password Policy

mamartins — Sat, 11 Nov 2023 09:07:28 GMT

The standard SAP functionality doesn't support what you are requesting. For that, you need to enhance your system with custom code.

Official documentation here: Password Rules | SAP Help Portal

Re: Password Policy

TMASaphir — Mon, 13 Nov 2023 14:15:45 GMT

Hello,

thank you for your comment.

How can I enhance the custom code? i did not find any user exit to check the compliance of the password when setting the password. There is the enhancement SUSR0001 but the code if after login on SAP and before the display of the sap easy access page.