Mass deletion of SNC-Names

[Tobias_P]

Hello,

In case of a security audit one of our customers wants to deactivate SSO functionality. Therefore we need to remove more than 500 SNC-Names in multiple systems and clients. And, it's not possible to deactivate SNC/SSO, because other customers on that systems want to use it further.

The possibility of using table USRACL is not working newer releases as it was working in older releases.

At the moment there is no report or transaction to remove SNC-Names in mass, is that correct?

Any idea?

Best regards,

Tobias

[Colleen]

Have you look at the SNC1 to SNC4 transactions? See if there is a way to leverage BAPI to wipe values?

If not, record an SECATT to wipe the values out or custom program with wrap on a BAPI*USER* and add it to your landscapes?

[Tobias_P]

SNC1 and SNC4 (2 and 3 are obsolet) doesn't bring the option to delete SNC-Names.

But wait ...

<one more test later>

... I guess I've found a workaround. It's not nice, but it's working. > See my solution.

Thank you anyway!

[MatthiasL]

Fairly sure SU10 can do this too.

[Tobias_P · Accepted solution]

Workaround to mass delete SNC-Names:

1. SNC4 > uncheck "Display errors only" > Execute > select and copy all User Names as wanted
2. SNC1 > use "Multiple selection" for "User" > use "Upload from Clipboard" > Copy/Execute > uncheck "Users without SNC names only" > delete Prefix and Suffix of SNC Name > select "Alias as Variable Part" > Execute > take a look > Save
3. SNC4 > check "Display errors only" > Execute > take a look > go back > check "Delete invalid canonical names" > Execute > Save

Now SNC-Name of all copied users are deleted.

[robsolomon · Accepted solution]

this worked great for me.