How do one prevent the Fire Fighter ID password from expiring?

[former_member603813]

We have implemented Super User Privilege Management in SAP GRC 5.3. We have created Fire Fighter IDu2019s and logged in with each individual ID providing a new password. We then maintained the new password in Super User Privilege Managementu2019s in u201CSecurityu201D tab.

We have also implemented SAP note 992200 preventing Fire Fighter Idu2019s from logging in via the SAP Gui. I.e the only way Fire Fighter IDu2019s can login to SAP is via the Super User Privilege Management workbench when assigned to a Fire Fighter.

However, the parameter in RSPARAM, login/password_expiration_time is set to 40 days. This means that we need to reset all the Fire Fighter ID passwords every 40 days. Does anyone know how to get pass this issue without changing the parameter login/password_expiration_time. Does anyone know how to prevent the Fire Fight ID password from expiring?

We have considered changing Fier Fghter ID's Service type user ID's but I am not convined that is the correct thing to do.

[koehntopp]

What you really need to do is to upgrade to something beyond SP07.

Then you can create your FF IDs as either Dialog or Service users, and you no longer will need to maintain the password, as the application will reset it before any new FF Login.

Frank.

[Former Member]

Hi Wes,

You can not create FF ID as dialog user. You must have FF ID as service user. If you use service user to create FF ID then you won't have to change password as per your password policy. That is the requirement for SPM implementation.

Regards,

Alpesh