Send password to backend from UI5 app

[sagar17bansal]

Hi Community Members,

I have a requirement where in I have to provide user the functionality of changing his login password in case he forget his previous password through a SAP UI5 application. My concern is here how can I send password to the ECC system securely from my UI5 app using odata. I'm using $Batch to post data in the backend but still the password is available in plain text format in the network tab which can be easily accessed.

I cannot use SSO here as the user has not signed in yet.

Any help would be appreciated.

Thanks & Regards,

Sagar Bansal

[former_member739952]

Dear Sagar,

Were you able to finally get solution to your problem. As I am also looking for a similar requirement where I need to reset the password of Enterprise portal by using a UI5 application. Cannot use the standard Reset password functionality of SAP EP as need to add additional OTP in mobile authentication for password reset.

Thanks & Regards,
Chinju

[prashil]

Hi Sagar,

There is already a built-in functionality for reset password on the Fiori Launchpad, you should try to reuse it.

I would suggest to refer it, as it is not recommended to send password. In an ideal world, all of the credentials should be first hashed.

Thanks

Prashil

[sagar17bansal]

Hi Prashil,

Thank you for your response.

There is no concept of fiori launchpad on my project.This is a custom solution built on SAP Enterprise Portal technology.The reset password functionality is required to reset the password for this portal.

Thanks

Sagar Bansal

[saurabh_vakil]

If you use identity management on your SAP Enterprise Portal, then you can use the self service password reset functionality described here - Self-Service Password Reset. As Prashil has mentioned, there are standard password reset options available so you should use them instead of reinventing the wheel again.

[sagar17bansal]

Hi Saurabh,

Thank you for your response.

I cannot use this functionality because the UI5 app I'm developing has other functionalities too and will be called from multiple places.

The only thing I am looking here is how can I send password to the backend securely.

Thanks & Regards

Sagar Bansal