Same password not to be reused within 52 weeks

[Former Member]

Hi Team,

We are setting up some password parameter with the rules that is specified by the company and while implementing one of such rule , i was unable to find the associated parameter.

The Rule is Password not to be reused within 52 weeks.. Is there any SAP parameter available to satisfy this condition. Thanks in Advance.

[Former Member]

Hi,

look at following parameter

login/password_history_size ->This parameter controls the size of the password history.

The password history is evaluated when a user chooses a new

password: the system rejects the (re)use of passwords that are

stored in the password history.

by default this parameter has value 5. means user cannot use his last 5 password,

this parameter is depend on

login/password_expiration_time: Duration of validity of passwords (in days)

login/password_change_waittime: Wait time between two password changes

Password not to be reused within 52 weeks

you need to make combination of above three parameters and activate password policy by define following parameter

login/password_compliance_to_current_policy -> 1

regards,

kaushal

[Former Member]

Hi,

Sorry but i still fail to understand how all the below three combination can help me set up the criteria of not using the same password within a span of 52 weeks.

login/password_history_size ->This parameter controls the size of the password history.

For Eg, if i change the password everyday for 6 consecutive days , the password set on 1 day can still be used on 6th day.

login/password_expiration_time: Duration of validity of passwords (in days)

This parameter gives in details about the validity of single password and not about

how same password's use can be restricted to a span of 52 weeks.

login/password_change_wait time:

This parameter just specifies the time difference that be set before we can change the password.

[Former Member]

HI,

you mean to say user can not use same password within 52 week.

it is not possible.

only following is possible for 100 days only.

login/password_change_waittime -> 1

so user can only change is password once in a day unless administrator is reset his password.

login/password_history_size ->100

( not possible for 364 days because max value is 100 only)

so user can not use his last 100 password.

regards,

kaushal