cancel
Showing results for 
Search instead for 
Did you mean: 

Stop auto password reset for FFIDs by firefighter application logic

Sankar_Aravind
Participant
0 Kudos
1,606

Hi All,

Could you please advise if there is anyway to stop auto password reset for FFIDs by firefighter application logic for each login ?

Since the SSO is not supporting for FFID through Edge. we are looking for alternatives for web based/Fiori applications through FFID

I have referred other thread, but did not find the suitable solution.

FireFighter ID | SAP Community

Thank you.

Aravind.

Accepted Solutions (0)

Answers (2)

Answers (2)

Mate
Product and Topic Expert
Product and Topic Expert
0 Kudos

Dear Aravind,

you can set up to use Trusted connection for a particular connector. In that case the Firefighter logon will not use
passwords, hence it will not change the password for every logon.

For Web based UIs (except HANA), you should use Web Based firefighter.

Sankar_Aravind
Participant
0 Kudos

Thank you Mate.

So with Web Based FF , how about the logging and reporting ? will it capture the logs ?

Any documentations on this topic of Web based firefighter ?

Mate
Product and Topic Expert
Product and Topic Expert
0 Kudos

I suggest to check the following KBAs and Notes for more information: 2672041, 2952305, 2974359 and 3236366.

pau_torregrosa
Participant
0 Kudos

Hi Aravind,

If you are using SAP GRC Access Control solution for FFID provisioning, you should not be providing passwords to end users, nor having to reset them. Your Firefighter IDs should be set as 'Service' User Type, to avoid issues with password policies.

Hope that helps.

Regards.

Pau

Sankar_Aravind
Participant
0 Kudos

Hi Pau,

Agree with you. Sorry i did not mention about the version, its SAP GRC 12.0.

And we should have restricted the FFIDs to login directly.

However, since the requirement is to use FFIDs even to check Fiori/Web applications also and Edge is not supporting SSO through FF session like how we did easily with IE, that's where users entering password. I even checked with SAP GUI 7.70 switching browser, but did not work.

And its service user only. But once the session is completed, the password resets automatically.

Thank you,

Aravind.

pau_torregrosa
Participant

Hi Aravind,

Check this blog post: https://blogs.sap.com/2014/03/24/emergency-access-management-eam-for-webdynpro-applications-or-web-b...

The problem seems to be that SSO is not compatible with Service users. I would recommend to set them as Dialog users, and create a User Policy for them: https://blogs.sap.com/2013/01/04/sap-security-policies-group-policies/

Regards,

Pau