Can WAS/ UME permit validation of userid/password against a password hist?

[Former Member]

I have a client requirement where a particular user who logs in cannot re-use any of his last 5-6 passwords. Does UME support this?

[juergen_kremp]

Dear Yew Jin Kang,

UME itself does not support password history checking. It can only prevent that the old password is part of the new password, if UME property "ume.logon.security_policy.oldpass_in_newpass_allowed" is set to FALSE.

However, if you install a J2EE Engine and choose to use the ABAP user management, then the password policies of the ABAP system enforce this requirement (up to 6.40, history length is 5, up to SAP_BASIS 7.00 history length is configurable up to 100).

To be honest, there is a drawback. The nice error messages from ABAP are not propagated to the UME web screens, so users will only get a message "Failure during setting new password" or so.

Kind regards,

Juergen Kremp

[Former Member]

Hi,

check this link

http://help.sap.com/saphelp_nw04/helpdata/en/59/bf2287b3cb5e48af94f99929ad15b9/frameset.htm

and also SAP Note 720590 User Management Engine (UME) on WAS 6.30 and higher.

hope this helps you...

Regards

RK