How can one monitor changes to SAP password settings? Does certain logging need to be enabled?

[former_member1016972]

We would like to identify when the password settings are changed in our SAP ECC system. We would like to know if certain logging needs to be enabled and where the log would ultimately be stored. Thanks!

[patelyogesh]

Hello Eric Beck,

You can check this into SAP Transaction code SUIM

Did you explore this TCode yet?

-Yogesh

[former_member1016972]

Password setting changes can tracked through SUIM? I am not talking about users changing their passwords. I mean the actual settings for the system - like password length & complexity, etc.

Thanks!

[patelyogesh]

If you change profile parameter there is always versioning available and it is always tracked as shown below

[former_member1016972]

This looks good. I am just an auditor though, not so technical, and not familiar with versioning. Do you know where there could be some guidance on how to set this up & see it? Or do you have any guidance perhaps?

[former_member202592]

Hi Eric,

The system profile versioning is enabled by default.

Every saved change done in a system profile after it's activation will generate a new profile version. You can check each version in transaction RZ10.

Also you can filter the parameters inside the profile for 'login/*' to only display the password related parameters.

Cheers,

Filipe Santos