SAP Identity management- initial load ABAP job issues

[former_member256680]

Hello,

I have connected SAP abap system as target system to IDM8.0 SP5.

After running abap connector package- initial load job, i have observed that Users and roles reflected in IDM UI but in SAP system, IDM has deactivated passwords for existing users.

I have gone through previous sdn posts and disabled passes relevant to MX_DISABLED, MX_PASSWORD_DISABLED etc in WriteABAPUsers pass (under initial load), CreateUser & ModifyUser (under plugin).

Now IDM is no more updating password in ABAP systems.

But when I want to create new Users from IDM to SAP , now it is giving error below error...Surely it has occurred as i have disabled entries for password handling.

putNextEntry failed storingTESTIDMSAP13
Exception from Add operation:com.sap.idm.ic.ToPassException: Must specify user password for TESTIDMSAP13

Please suggest, which entries should be exactly disabled so that password will not be touched and new user creation should work as usual.

[former_member2987 · Accepted solution]

Hi Imran,

Don't forget to search the archives here as well. Answers for 7.2 will still be applicable, and even 7.1 questions should give some lines of inquiry.

Not sure if this link will help as we discussed a wide variety of issues, but here it goes: https://archive.sap.com/discussions/thread/3275055

Regards,

Matt

[former_member85790]

Hi Imran,

the problem appears to be that you have ispassworddisabled disabled in the CreateABAPUser pass.

The ABAP system wants to create the user with an enabled password, but fails because you aren't providing one. You should re-enable this attribute. If you will never be writing passwords here you can optionally replace the script call with 1, to ensure you are always creating users with disabled passwords.

Kind regards,

Adam

[former_member256680]

The issue is solved, during initial load job i disabled mx_password_disabled entries under WriteABAPusers , CreateUser and ModifyUser tasks.

After job is executed, I enabled passes again, so that next time normal user creation should work fine.