SAPSR3 Password Policy

[former_member299422]

Hi All

I need to reset the SAPR3 & SAPSR3 passwords in my landscape (ECC 5.0 and ECC 6.0 respectively), and need to find out if SAP defines any specific standard policy to confirm the password rules. My main concern is whether - We can include special characters (and how many) to make the password and in turn, security even more robust.

Also, kindly confirm if the user SAPSR3 can be included in any other group (other than Default).

Kindly assist.

regards

Kunal Pahwa

[isaias_freitas]

Hello Kunal,

Regarding the password policy (special characters, etc), I know that you can use the profile parameters "login/min_password*":

• login/min_password_diff
• login/min_password_digits
• login/min_password_letters
• login/min_password_lng
• login/min_password_lowercase
• login/min_password_specials
• login/min_password_uppercase

As far as I know, there is no "maximum" limit for special characters (e.g., depending on the settings of the above parameters, you could set a password entirely with special characters).

Regarding the SAPSR3, I don't know, let's wait for someone else's reply .

I hope this helps.

Regards,

Isaias