Big4Guy

Authentication is a process which ensures that only legitimate users have access to system. Like many other application softwares, SAP R/3 uses passwords to authenticate its users. SAP provides a lot of flexibility in defining the password rules to suit company's requirement. Configuration of password rules form an important part of any SAP setup. Many of the password rules listed below can be changed by a BASIS administrator in the profile parameters simply by changing the values in the RSPARAM (SA38 > RSPARAM Display Profile Parameters) report from "0" to "1" in some of the cases. SAP R/3 password rules include:

1. First time dialog users are provided with an inital password "init" that they must change when used for the first time.
2. By default, the minimum password length is 3. This can be increased in the profile parameter (SA38 > RSPARAM).
3. As far the first three characters of the password go, SAP prohibits users from selecting first three characters in the same order as part of the username. Also, first three characters cannot all be the same and cannot include all space characters.
4. SAP R/3 password rules restricts the words "PASS" and "SAP*" as passwords.
5. Users can be forced to change their passwords at regular intervals.
6. Certain characters or word patterns can be restricted.
7. Users cannot reuse the last five passwords.

Related Posts

Configurable Controls in SAP R/3
Segregation of Duties in SAP R/3
GL Account Postings in SAP
Concept & Structure of Tables in SAP