Quantcast
Channel: SCN: Message List
Viewing all articles
Browse latest Browse all 9129

Re: Lock user account after XX days

$
0
0

Hi Dhara,

 

In order for the password max idle time functionality to work, you actually have to change two UME properties.

The first UME property ume.logon.security_policy.password_max_idle_time you have already changed. With this property you specify after how many days of not using his password a user will not be allowed to authenticate. This property also has an additional effect. When it's value is greater than 0 during every login the user will be updated with the last successful password check time.

This property works together with another UME property ume.logon.security_policy.password_successful_check_date_default. This property specifies what is the last successful password check date for users that do not have it set in stored in the database and for users that have a value that is less than the default value. For example if the property is configured to 31 January 2016 and a user has no value or an value that is 30 January 2016, the default value will be taken into account.

In order to use the feature you should:

1) Set the UME property ume.logon.security_policy.password_max_idle_time to 60.

2) Set the UME property ume.logon.security_policy.password_max_idle_time to the day you activate this functionality or a date in the past, but not older than 60 days as all users that do not have a value will be locked. This way all users will have 60 days to use their passwords. If by mistake you set an older date then you have to change the values from configtool and restart the server.

Whenever a user's password has not been used for more than the configured time, the user will not be able to authenticate and he will get an error message that his password has expired. But this will not be reflected in the useradmin application. The reason behind this is that this is a dynamic functionality that can be easily changed with the above two properties. Persisting this information in the database on every change of the properties is too time consuming.

 

For more information about the above mentioned UME properties, see https://help.sap.com/saphelp_nw70ehp1/helpdata/en/b5/16c43bdd3da244a1d3372a77b5f83f/content.htm

 

How to edit UME properties online and from configtool is described in https://help.sap.com/saphelp_nw74/helpdata/en/4a/864d94a016203be10000000a42189b/frameset.htm

 

Best regards,

Nikolay


Viewing all articles
Browse latest Browse all 9129

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>