MX_PASSWORD

[jaisuryan]

Hi Experts,

I have a requirement to find a list of users whose password is less than 10 characters. Is it possible to query in any of IDM tables/views? If so, please advise.

I can see value stored for MX_ENCRYPTED_PASSWORD attribute in MXIV_OENTRIES but it has encrypted value which is not useful for this requirement.

Kind regards,

Jaisuryan

[Former Member · Accepted solution]

Hi JaiSuryan,

You can always decrypt the encrypted value using the uDecrypt function.

For more information on this function, please refer to the list of internal functions in SAP IDM.

Thanks,

Krishna.

[jaisuryan · Accepted solution]

Hi Krishna,

Yup, I just did it using uDecrypt to get string and find the length using string function. Thanks.

Kind regards,

Jaisuryan

[former_member2987 · Accepted solution]

While this is the right way to accomplish your goal, it's kind of bad from a security perspective IMO.

It would be better to have password expiration along with a password policy that sets you minimum password length. Any time a password is decrypted, it's vulnerable.

I fully realize that there are sometimes operational needs that break security best practices,  but I wanted to put this "on the record"

Matt