XS form to change user password in HANA

[Former Member]

So we are rolling out applications on HANA in our organization. There are several challenges related to user provisioning, but one that perplexed us for some time was about how to have the user change his/her initial password. Unlike the SAP GUI, where the user is forced to change the initial password at first logon, the HANA application simply refuses to authenticate if the initial password is not set.

The user can change his/her password using the HANA studio, but it's not feasible to roll out the HANA studio to all app users!! The solution is to use the XS functionality to change the password. This is the URL:

http://<host>:<XS port>/sap/hana/xs/formLogin/login.html 

This provides the familiar change password screen, wherein the user can change his/her password and then go on to work with the application. The next step would be to invoke this URL from the application itself if the user password is initial. So something like:

If 'select ADMIN_GIVEN_PASSWORD from sys.users where user_name = '....'' evaluates to TRUE, then redirect to the password change URL. Has anyone faced a similar situation, and if so, how did you resolve it?

[Former Member]

As of HANA SPS09, users can change their password at http://<server>:<port>/sap/hana/xs/formLogin/profile/.  Using this url does require the role sap.hana.xs.formLogin.profile::ProfileOwner, which just grants them access to the url I mentioned plus the object needed to change their own password.

[Former Member]

This does work but it seems that it takes you to an immediate 403. This can be disconcerting to users thinking that it didn't work. Is there another option that doesn't do this?

[Former Member]

Hi Rob,

You need to add this role to users

sap.hana.xs.formLogin.profile::ProfileOwner