cancel
Showing results for 
Search instead for 
Did you mean: 

SAPGUI - SSO - Kerberos - Logon possible when user locked !

0 Kudos

Hello Colleagues,

we have been using the Kerberos SAPGUI Single Single Sign on feature for some months now.

Everything is working fine.

Now we noticed the following problem.

=> If an administrator locks a user in SU01 the user cannot log on anymore through SSO.

(That's normal and how it should be)

=> If a user locks itself after entering x wrong passwords .. the user can still logon through SSO !

No real disaster here, but when lets say you perform a system copy and you want to lock all users,

this might cause problems, as the admin lock will not overrule a password lock.

Who has experienced the same thing ?

Who has a possible solution for this ?

Thank you all

Hans

Accepted Solutions (1)

Accepted Solutions (1)

nelis
Active Contributor
0 Kudos

=> If a user locks itself after entering x wrong passwords .. the user can still logon through SSO !

Check parameter: login/password_change_for_SSO

...RZ11 documentation explains its usage.

Nelis

0 Kudos

tnx alot !

Answers (0)