Community
Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Read only

How to enforce basic password rules in SAP ?

Former Member

‎2016 Nov 07 11:11 AM

0 Likes
1,382

Hello SAP lovers and experts,

I'm new to SAP BC and I have to apply some security rules to passwords, I inserted below what was asked and how I applied it. Can anyone tell me if I applied the proper rules ? I often used USR40, did I use it right ? Also, should I set the rules in the default profile or instance, what's the difference ?

  • 8 characters password login/min_password_lng
  • different than the user ID or his name USR40 filled with user IDs and names
  • Atleast one char and letter, do not use the smae character in a row login/min_password_letters,login/min_password_digits and USR40 (*AAA*, *BBB*, *CCC*...)
  • Not end or start with a letter USR40 (1*, 2*, 3*.... *1, *2, *3...)
  • Different than the last 5passwords login/password_history_size.
  • No personnal data like phone, birth of place ... USR40 ?
  • Change every 3 month login/password_expiration_time
  • Apply at next logon login/password_compliance_to_current_policy

Hello SAP lovers and experts,

I'm new to SAP BC and I have to apply some security rules to passwords, I inserted below what was asked and how I applied it. Can anyone tell me if I applied the proper rules ? I often used USR40, did I use it right ? Also, should I set the rules in the default profile or instance, what's the difference ?

  • 8 characters password login/min_password_lng
  • different than the user ID or his name USR40 filled with user IDs and names
  • Atleast one char and letter, do not use the smae character in a row login/min_password_letters,login/min_password_digits and USR40 (*AAA*, *BBB*, *CCC*...)
  • Not end or start with a letter USR40 (1*, 2*, 3*.... *1, *2, *3...)
  • Different than the last 5passwords login/password_history_size.
  • No personnal data like phone, birth of place ... USR40 ?
  • Change every 3 month login/password_expiration_time
  • Apply at next logon login/password_compliance_to_current_policy
Reply
2 REPLIES 2
Read only

Former Member

‎2016 Nov 07 11:25 AM

1,059

please check this link-

https://help.sap.com/saphelp_nw70/helpdata/en/22/41c43ac23cef2fe10000000a114084/frameset.htm

Read only

Former Member

‎2016 Nov 07 1:27 PM

0 Likes
1,059

Thanks, that was great help !

I'm still wondering about those two points :

  • Password can NOT contain the user name or ID
  • Password should not contain infos like phone number, date of birth...

I can use USR40, but I would have to update it for each new user, isn't there a way to prevent it automatically ?