User management for the Identity Management User Interface

[former_member195996]

Hi everyone!

We have set up synchronization users from Identity Store in UME UI([Guides|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/304280b4-25d0-2b10-b6a4-89c27409dea7?quicklink=index&overridelayout=true]).

When we assign the privilege priv: ume should be performed three tasks:

1. creating UME user

2. modify UME user

3. Add Password

But we see the fulfillment of only 1 and 2 tasks.

Why not fulfilled the task number 3?

[Former Member · Accepted solution]

Hi Ivan,

You should be able to set password directly on the ToSPML pass, in ONE pass/job

Benjamin

[former_member195996 · Accepted solution]

Hi Benjamin

Sorry, I do not quite understand what you said.

Could you write in more detail what should I do?

In the configuration instructions, it looks like this:

Modifying DEFAULT_PASSWORD

The constant DEFAULT_PASSWORD contains the initial password the users log in with the

first time. This password needs to be changed after the first login.

To modify the global constant DEFAULT_PASSWORD, do the following:

1. Select the "Global constants" entry in the console tree.

2. Select the constant DEFAULT_PASSWORD and view the properties:

[Former Member · Accepted solution]

Ivan,

In the workflow called "#Create UME user" from attached MCC files of the Guide,

Job "Add Password" will be executed only if the selected user does NOT have attribute MX_ENCRYPTED_PASSWORD set.

So, if the user on who you tried to provision UME privilege has already an MX_ENCRYPTED_PASSWORD defined correctly (DES3 encoded string), the job "Add Password" will not be executed.

To check this, get the MSKEY of the provision user and execute the following SQL query of the conditional task :

If you get a line in return, result is TRUE, else it's FALSE

SELECT COUNT(DISTINCT mskey) FROM MXIV_SENTRIES WHERE is_id=%$glb.SAP_MASTER_IDS_ID% AND
((mskey IN (SELECT mskey FROM MXIV_SENTRIES WHERE attrname='MX_ENCRYPTED_PASSWORD' AND searchvalue LIKE '%' AND mskey= <Enter the MSKEY of the provision USER>)))

Benjamin