07-03-2015 11:32 AM
We are trying to implement IAM in our environment.
Issue is once user will use Button "New password", at SAP GUI.
He'll be out of sync with AD.
To avoid it we need to disable or remove this button.
Please share how can we do it.
Thanks in anticipation fro your time.
07-03-2015 12:04 PM
07-03-2015 12:47 PM
Instead of trying to keep passwords in sync between AD and your ABAP systems, you could also user Kerberos based single sign-on. In that case the passwords stored in the ABAP system are no longer relevant as users will use their Windows/AD authentication to access ABAP systems.
You will find more information at
http://scn.sap.com/community/sso
This might be more cost efficient than the workarounds you are looking for.
Best regards,
Christian