FFID login issue

[Former Member]

We are on GRC 10.0 SP08.

We have Dev Central system where we have created FFIDs for all dev systems and assigned required roles.

In GRC when assigned those FFIDs and trying to logon as Firefighter we are able to login only to the central system successfully.

For other systems once we click logon and enetr reason codes and proceed, login screen asking credentials to the dev system is appearing.

Can anyone suggest why is this happening.

Regards,

Sravan

[Former Member · Accepted solution]

Note 1655493 can be applied if SP level is SP06 or below.

We are on SP08 and we are not able to aply using Tcode SNOTE.

RFC communication user has SAP_ALL.

FIDs are not locked.

Please help what would be a solution.

Regards,

Sravan

[Former Member · Accepted solution]

Hi Sravan,

Did you try changing the SCUM settings for initial password to "Everywhere" instead of "Global" and test the scenario again?

Best regards,

Smriti

[neerajmanocha · Accepted solution]

Hi Sravan,

Try to reset the FFID's initial password as I seen this before. This trick resolved the issue.

Sometimes what happened, FFID is dialog user type and initial password is not reset and it gives some issues.

Thanks & Regards

Neeraj

[Former Member]

Hi all,

I am having exactly this issue. SPM is asking for password. I don't know what to check again as I have checked everything. Can you please advice? We are not using CUA. Thanks

[Former Member]

Hi John,

Please check if  connections between GRC and End systems are established successfully and also if FFID role has all required RFC authorizations to login into remote system.

If not solved, please look into the solutions which are present in above replies and try.

Regards,

Sravan

[Former Member]

Hi SKV,

I can do remote logon to/from the GRC system and the backend system. FFID role has RFC authorization. I have also ensured that the appropriate accounts are service users. I don't know what to check again.

[Former Member]

Issue resolved by following all the above recommendations. Thank you.

[saksham]

Hi Sravan,

That is great news.

I will check this internally if there is any reference note explaining the same SCUM setting.

Regards,

Saksham Minocha

[Former Member]

Hi ,

Issue is resolved by changing SCUM settings.

But the note 1655493 need not be applied for GRC 10.0 SP08 as we have the same issue fixed after SP06.

What would be the reason we faced the issue on SP08 also.

We were not able to implement note in transaction SNOTE, but when we tested changing SCUM initial password setting, we found our issue fixed.

Do we need to explore more on any backend configuration to know why we faced the issue even we are on SP08?

Or please provide if anybody have any referance note explaining the same SCUM setting change to be implemented in SP08 also, because we are not able to justify the solution but solved the issue for Business.

Regards,

Sravan

[Former Member]

Hi Sarvan,

Please make sure that the RFC user in the child system  has the specific authorization's.

You can check that by setting the trace for that user in the child system using the Tcode ST01.

click on generate filters and add the specific user name

You can view the details about the RFC user in the logon and security tab of the specific connector in sm59

once the trace is set then try the login again.Once you have done the login check the trace.If there is any trace,Please assign those authorization to the User.

Below is the example of a trace which occured

Please assign the specific authorizations to the RFC user as captured in the trace and test the scenario again .

Hope this will help

thanks and regards

Japneet singh

[Former Member]

Hi Sravan,

1-Please refer to the sap note-1575048 and try setting the password policy for the CUA system as

"Everywhere"

2-Check if the FFID is locked,if YES then unlock it and reset the password to some new password.

3-Make FFID as a dialog user.Change the password to some new one.Inactive the userexit and logon

with FFID as a dialog user and reset the password if the system asks at the time of logon.

Once done make the user as a Service user and activate the user exit again and then try.

4. Make sure you have configured the parameters 1000 and 1001 in the Plug-in system.

Best Regards,

Nandita Varshney

[saksham]

Hi Sravan,

Kindly also chceck that the FFID has S_RFC authorization.

Regards,

Saksham Minocha

[saksham]

Hi Sravan,

1.Ensure that RFC user has proper authorizations to change the password.

2.Check that the FFID is not locked.

3.If the target system is CUA child system, refer to the attached note
1655493.

Regards,

Saksham Minocha

[Former Member]

Hi Sravan,

Can you please change the SCUM settings for initial password to "Everywhere" instead of "Global" and test the scenario again?

Best regards,

Smriti

[Former Member]

Note 1655493 - Firefighters are not able to login to CUA child systems

Regards,

Sravan