Authentication and Access Control System

[Former Member]

<i>Hi</i>

I have a few questions regarding the SAP UME that I really need answers to.

1. Is the password stored encrypted in the database?

2. Is the password stored in such a way in the db, that it is impossible for the Sys admin to decode it?

3. Is the password one way encrypted. Even the vendor can't decode the password?

4. Can the user be limited to only use certain workstations?

5. Is the SAP UME totally secured from access via third party programs, such as MS Access, MS Excel, MS Notepad ....?

thanks// -Fred

[Former Member]

1. Yes, password is encrypted

2. No, sysadmin cannot decode it

3. Right, vendor cannot decode it

4. Nothing in the UME to stop a user.....

5. Didn't understand the question...

• security is good until breached ****

[Former Member]

Thanks a lot for your quick answer!

Qustion no 5 is a little bit tricky to understand. The answer is probably no, a user can't reach the UME from a third party application.

Best Regards// -Fred

[Former Member]

5. It could be possible if UME is being exposed as webservice... you may want to find out.