Prevent Password change

[Former Member]

Hello,

I am in the process of doing an initial load from and ECC system into IDM and provioning roles back to ECC system. During this entire process I do not want IDM to change the users password or make their passwords disabled. I want the users to continue logging into SAPGUI without any impact. I am able to see that the password attributes are commented in the initial load for 'WriteABAPUser" pass. Is there anything else that I need to be careful about.

Martin.

[former_member2987 · Accepted solution]

Martin,

This should not be too difficult to do.

The basic rule of thumb would be to comment out the attribute entries in the modify job that you do not want updated.

These would be:

MX_PASSWORD

MX_ENCRYPTED_PASSWORD

MX_LOCKED

MX_DISABLED

This would need to occur in the ABAP Modify task.

Hope this helps!

Matt

[Former Member · Accepted solution]

Are you referring to the  Plug-in task - Modify ABAP user ? For some reason, I was not able to make any changes in this task. Moreover Password attribute is only present in Plug-in 8 Task - Set ABAP Password. I am bit confused.

Message was edited by: Martin Jacob

[Former Member]

Hi Martin

Disable the attributes in the CreateXUser and UpdateXUser hook tasks.  You may want to update the initial load task attributes too to prevent those disabled flags from doing anything to your IDM users

Peter

[Former Member]

To add, don't forget MX_PASSWORD_DISABLED as well.  It writes to the ABAP connector attribute ispassworddisabled.  Will remove the password from the user.

[Former Member]

Hello Chris,

Can you please give more detail. In which job should I disable these attributes