Deny special characters in SAP password

[Former Member]

Hi Folks,

I have a question regarding the SAP profile parameters related to SAP Password.

I need to set parameters in such a way that the password does not allow special characters.

Please suggest a way in which this can be accomplished

Any help is greatly appreciated.

Thank You!

-AC

[Johan_sapbasis]

HI,

If you are doing this you might want to consider the other parameters with impact on special characters i.e.

login/password_charset

login/password_downwards_compatibility

But Hermanth is correct. Set the value of to 0.

Security Policy Attributes for Logon and Passwords - Identity Management - SAP Library

Kind Regards,

Johan

[former_member220495]

Hello,

Hope the below parameter helps.

login/min_password_specials

Defines the minimum number of special characters in the password Permissible special characters are $%&/()=?'`*+~#-_.,;:{[]}\<>│ and space Default value: 0; permissible values: 0 – 8 Available as of SAP Web AS 6.10

Best Regards,

Jagraj Singh

[Former Member]

Hi Hemanth,

I am doing good, how are you?

I have checked the Identity management parameters but putting the value 0 for Parameter

login\min_password_special does not restrict special characters in user's password as its min no. and not max no. of special char. in a password.

It will not restrict a user to use 1 or 2 special characters in his/her password.

is there any other way?

-AC

[Former Member]

Hi AMit,

You can use parameter

login/password_charset to specify the characters to be used in the Password so that you can restrict user to the set of the characters and deny them from using special characters like % or & ^ etc.

login/password_charset

Default: 1 Permissible values: 0: Restrictive.The password can only consist of digits, letters, and the following (ASCII) special characters: !"@ $%&/()=?'*+~#-_.,;:{[]}\<>, space, and the grave accent. 1: Backward compatible.The password can consist of any characters including national special characters (for example,ä, ç, ß from ISO Latin-1, 8859-1). However, all characters that are not contained in the set above (for value = 0) are mapped to the same special character, and the system therefore does not differentiate between them. 2: Not backward compatible.The password can consist of any characters. It is converted internally into the Unicode format UTF-8. If your system does not support Unicode, you may not be able to enter all characters on the logon screen. This restriction is limited by the code page specified by the system language.

This parameter defines the characters of which a password can consist. Caution With login/password_charset =2, the system stores passwords in a format that systems with older kernels cannot interpret. Therefore, ensure that all systems involved support the new password coding before setting the profile parameter to the value 2.

Let us know if this help your requirement.

Regards,

ram

[Former Member]

Amit,

Think you got us a bit of track it is the good parameter to use, but when set on default 0 it means that people not need to use a special character like eg @ or !.

If you want to ensure people use 1 or 2 special characters you need to set it either to 1 or 2 with a max of 40.

Profile Parameters for Logon and Password (Login Parameters) - Identity Management - SAP Library

As Hemanth and Johan are saying, check the link to the SAPhelp page on profile parameters, you can even set that it needs to be a capital in the password etc.

Defines the minimum number of special characters in the password Permissible special characters are, in particular, !"@ $%&/()=?'`*+~#-_.,;:{[]}\<>| and space and the grave accent.

After SAP NetWeaver 6.40, all characters that are not letters or digits are regarded as special characters.

Default value: 0; permissible values: 0 – 40

Available as of SAP Web AS 6.10 (Until SAP NetWeaver 6.40 (inclusive), up to 8 characters.)

[hemanth2]

Hi AC,

Hope you are doing good. please check the login/min_password_specials  property:

Profile Parameters for Logon and Password (Login Parameters) - Identity Management - SAP Library

Hope this helps.

_ _ _ _ _ _ _ _ _

Kind Regards,

Hemanth
SAP AGS
_ _ _ _ _ _ _ _ _