Can inactive users be automatically locked?

[oren_harlap]

Hello,

We would like to automatically lock users who have been inactive (have not logged in) for more than 180 days.

We use SSO from the portal so no one logs in using a password.

Is there a way to lock these users automatically or do I have to run a report in suim for users who have been inactive and manually lock them?

Thanks,

Oren

[former_member192665 · Accepted solution]

Hi,

please be more precise. You are using a portal for authentication but where would you like to lock the users? Only in UME or also in backend systems? In your landscape, is there also SAP Identity Management or is this a scenario without SAP IdM?

If you are using SAP IdM then I would do it as follows.

1. Write a custom login module that writes the logon date for the user into a custom IdM attribute (via SPML or similar).

2. Have a job in IdM that checks for users where this date is more than 180 days in the past and set MX_LOCKED=1 for those users.

Then the locks are automatically propagated to all connected systems.

Cheers,

Kai

-

---

http://kaidentity.blogspot.com/