Reading Passwords from CUA or an ABAP client to IC

[Former Member]

Hi,

We are trying to read productive passwords from our ABAP client to IdM, the reason we have to go this route since we do have a 3rd party tool which will reset passwords in ABAP when they are changed in AD. I've created a job to read users along with password from ABAP client, when I run the job I'm getting a NULL value to IdM

Thanks,

Joe.P

[former_member2987]

Joe,

I'm not a CUA expert, but I will tell you from my past experience at these types of endeavors, that it won't work.

The password is usually saved as a non-recoverable hash so it can not be decrypted or reverse engineered.

Usually the best practice is to start setting productive passwords each time you reset the primary account password. This will you can capture it and save it to multiple systems.

Matt

[Former Member]

Matt,

Thanks for responding to my post, so what you are saying is SAP IdM won't be able to read passwords that are provisionined on a SAP ABAP system. I thought SAP IdM should be able to read and decrypt productive passwords on other SAP systems.

Thanks,

Joe.P

[Former Member]

Hey Joe,

there would be no other tool, having the capability do decrypt productive passwords of ABAP system.

Kind regards,

Achim

[former_member2987]

Joe,

Achim is correct. Essentially the only time that a password is truly accessible is when it is set by the user. If you are setting the password from IDM to other systems, you could record it in a encrypted format, which could be deciphered. Otherwise, the answer is no.

Matt

[Former Member]

Thanks every one responding to my question.

Thanks,

Joe.P

Edited by: Joe Padidham on Sep 21, 2011 9:46 PM