Netweaver: forced Password change / return Password to IdM?

[former_member327338]

Hi,

we have the following situation:

1) user is created on the ABAP System (with none-productive password) (by IdM)

2) user is given some portal roles/groups (by IdM)

3) user logs on to the NetWeaver Frontend (UMI is linked to the ABAP-System) and immediately needs to change the password (to get a productive one).

4) we want to push the password the user is setting here back into the Identity Store (to distribute it to other systems).

How can we achieve this?

A) can we replace the NetWeaver pasword change dialogue with an IdM selfservice task (how can this be done)?

B) can we get the password back from UME or the ABAP-Backend (in a "password hook"-way)?

- Are there other possibilities?

Can anyone give some direction regarding this issue?

Thank you and best regards,

Tobias

[Former Member]

Hello Tobias,

have you tried to set the password as a productive password in the ABAP system?

I do not know whether the retrieving of the password from the UME is really possbile, but I guess no. Or if possible, not without some implementation inside the portal.

Best regards

Dominik

[former_member327338]

Hi Dominik,

thank you for the reply! In fact setting a productive Password on the ABAP System is one of the possible solutions that already work, but it is just not the optimal solution in every case (for example if the password was reset by an admin or servicedesk).

I somehow have in mind that it may be possible not to force the UME to send password to the IdM (wich nevertheless may be done with some webdynmpro 'magic' programming) but to redirect the "change password" task of the UME to an IdM-Selfservice task so that instead of the standard dialogue an IdM selfservice task is shown. (But maybe this is from one of these 'unstable' roadmap sheets...).

If there is no Idea about that we will stick with the "productive password" solution.

Best regards,

Tobias