TempUserPassword in SAPUser provisioning

Hallo IAM experts,

can someone tell me the purpose of OverrideVaribales  "TempUserPassword" in the provisioning jobs ( SAPUser_Insert and  SAPUser_Update)?

As i see the value will be provisioning only, if the Password in SAPUser object is set. 

In TS the attribute is mapped to vrtTempPassword, but no further information is available.

Thank you for in advance

Regards

Parents
  • Hi satnam randhawa,

    this temporary password is needed to set a productive password in SAP (i.e. user must not change password at first logon). RFC function modules in SAP allow not to set the "productive" flag for password at user but set and change operations are allowed. So we set a known temporary password to change it immediately to the correct user password. If done so the password flag is set to productive by SAP.

    Regards

       Tino

Reply
  • Hi satnam randhawa,

    this temporary password is needed to set a productive password in SAP (i.e. user must not change password at first logon). RFC function modules in SAP allow not to set the "productive" flag for password at user but set and change operations are allowed. So we set a known temporary password to change it immediately to the correct user password. If done so the password flag is set to productive by SAP.

    Regards

       Tino

Children
  • Hallo Tino,

    thank you for detailed information.

    Based on your response i made some tests:

    If with account create an initial password is generated and it should stay as initial, then TempUserPassword is not necessary.

    On password change, it seems to be necessary to provision TempUserPassword, otherwise password in SAP will stay as "Initial", independend if ProdPWD value is provisioned as True.

    Regards

    Satnam