• State Suggested Answer
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 96 subscribers
  • Views 302 views
  • Users 0 members are here
Options
Related

TempUserPassword in SAPUser provisioning

Satnam
2 months ago

Hallo IAM experts,

can someone tell me the purpose of OverrideVaribales  "TempUserPassword" in the provisioning jobs ( SAPUser_Insert and  SAPUser_Update)?

As i see the value will be provisioning only, if the Password in SAPUser object is set. 

In TS the attribute is mapped to vrtTempPassword, but no further information is available.

Thank you for in advance

Regards

  • 0 2 months ago

    Hi satnam randhawa,

    this temporary password is needed to set a productive password in SAP (i.e. user must not change password at first logon). RFC function modules in SAP allow not to set the "productive" flag for password at user but set and change operations are allowed. So we set a known temporary password to change it immediately to the correct user password. If done so the password flag is set to productive by SAP.

    Regards

       Tino

  • 0 2 months ago in reply to tlindner

    Hallo Tino,

    thank you for detailed information.

    Based on your response i made some tests:

    If with account create an initial password is generated and it should stay as initial, then TempUserPassword is not necessary.

    On password change, it seems to be necessary to provision TempUserPassword, otherwise password in SAP will stay as "Initial", independend if ProdPWD value is provisioned as True.

    Regards

    Satnam