message to reset your sap user password just like in windows environment

[Former Member]

hi guys

sorry for the vague heading.

we are implementing a policy to enforce SAP to expire user password after 45 days as a part of our security initiative.

now i know i need to change the default value of login/password_expiration_time to 45 and restart the system to implement the same. but i have one query.

i need to know how can we send a message to user informing 15 days in advance that his password will expire. On windows server we have already implemented this so whenever a user logs into his desktop he gets a message 15 days in advance that his password will expire and he should change it within the 15 days. But i dont know how to schedule the same message in sap. Do i need to schedule something...please help.

Please suggest me can we implement the same message facility in SAP. if yes, then how.

please help.

many thanks for your time.

regards

bye..

[Former Member]

Hi Nathan,

check report RHIQ_UCAS_PASSWORD_CHECK

I think it will fullfill your requirement

Hope it helps

[Former Member]

Hi trupti

many thanks for your prompt reply.

i just checked the report RHIQ_UCAS_PASSWORD_CHECK , but it says that the report does not exist.

are you sure this is the correct name of the report.

regards.

[Former Member]

I am on release 701

may be you are on different so not able to see report

[Former Member]

Nathan,

You can have your ABAP staff create a program that sends these notifcations to end users. You can use the following SAP table to key off information on the 45 day cycle for password reset.

Table: USR02

Field: PWDCHGDATE

I havent heard/seen any standard SAP function to complete your request.

Thanks,

Matt

[Former Member]

Hi Trupti,

The report is from the HCM (HR) component and the password in this case appears to be for some integration of PD profiles for students with an external password, as it is using the securestore mechanism and not the SU01 user master record. In this case, the student must change their password via the interface which the ABAP system is providing for the system behind it.

At a first glance that is what it looks like to me. It calls the SU01 user BAPI to retrieve the mail ID of the person associated with the personell number.

@ Matthew: There must be an FM for this but I am not sure whether it returns the number of days back. I suspect it only calls the password prompt when day 0 is reached. I will take a look, but anyway suspect that it will not be a released FM (for example, implementing such a feature in SAP standard would result in a change to it's own interface...).

Cheers,

Julius

[Former Member]

hi mathew

many thanks for your reply. i will check this with my abap consultant .

really thanks for your help.

regards

[Bernhard_SAP]

...you could run such checks directly after the user login in the exit SUSR0001, or schedule a (nightly) job based on rsusr200 sending e-mail notifications to the corresponding users.

some hits from the search:

b.rgds, bErnhard

[Former Member]

The closest thing to it is report RSUSR200.

If you submit a variant of it restricted to user groups, user type, period since last password change, etc then you can send a mail to each of the users returned in the output. Pretty easy development and there are some hints in the report which Trupti mentioned, but I cannot see the report itself working for you...

Alternately, you can just set a flag in a custom table for them, and when they do logon they receive a reminder popup. This is probably a safer option as the time of logon is determined by the user and they only receive the message once when they do logon, but limited to SAPGui users.

Cheers,

Julius

[Former Member]

Please consult ABAPers to write simple program for this activity.