Password Validity Period For UME and ABAP

[Former Member]

Hi All,

We have SAP Netweaver system having both JAVA and ABAP stacks. We want to make sure that the passwords of the users expire after 90 days. We have made the changes in the ABAP engine by chaning the parameter "login/password_expiration_time" to 90 days.

We are not sure if we should change the "Password Validity Period" in UME to 90 as well. Can you please let me know if we need to change the password validity parameters in both UME and ABAP? Is it mandatory? What if we do not change it in UME, what impact will it bring on the system?

Thanks,

[JPReyes · Accepted solution]

The answer to your question is here, quote from help.sap.com

If you connect to other systems, you should be sure the security policies you define here, are in harmony with the other system. For example, if you define one password length here, but the users are restricted to shorter password lengths in the back-end system, it can lead to logon problems. If you use the user management of an ABAP system as the data source, these settings do not always apply. 

Read,

http://help.sap.com/saphelp_nw04s/helpdata/EN/43/3d77734ae830f3e10000000a11466f/content.htm

Regards

Juan

[MichaelShea · Accepted solution]

Juan is correct. The particulars of what part of the UME security policy still applies with an ABAP back end are covered in this topic: [Security Policy|http://help.sap.com/saphelp_nw04s/helpdata/EN/7f/c52442ad9f5133e10000000a155106/frameset.htm]. Read the last half of the subsection Integration with Security Policy of UME Data Source (ABAP or Directory Server).

-Michael

[Former Member]

Hello,

we have the similar your situation.

A portal with ABAP as UME datasource.

We set Password Validity Period (Days):60 in the UME but after 60 days password didn't expire.

In the ABAP system login/password_expiration_time= 0

Have we to set login/password_expiration_time= 60 ?

And when password expires which is the message that a user receive ?

Could you help me ?

Thanks.

Mario