GRC AC 5.3 SP06 UME Logon Issue

Question

Hi Guys,
A few people have found that when they try to login to the Access Controls Landing page (https://<server>:<port>/webdynpro/dispatcher/sap.com/grc~acappcomp/ac) on GRC AC5.3 SP 06, the user cannot login properly.
No error messages are shown at all. The user and password is just removed and the logon screen is just refreshed as if waiting for a user to login.
It seems to be the case that this is related to a password change requirement as if the user logs into the associated back end (abap stack) they are able to change the password. They are then able to login to the Java side without issue!
I have looked at a few notes (eg 980646) but this does not seem to be appropriate for the Access Controls Landing Page
Simon

Answer 1

Look here:
http://help.sap.com/saphelp_nw2004s/helpdata/en/4a/e06f429c789041e10000000a1550b0/frameset.htm
User ID: We recommend that you use the logon ID SAPJSF_. You can use any password.
·        User Type: The user must be of type system.
·        Authorization: The user requires authorizations for read access to user data, for authenticating remote users, and RFC authorizations.
As of release 6.20, the AS is shipped with two roles that provide the required authorizations. The role you use depends on whether changes to administrative data or creation of new users from the UME are required or not.
○       SAP_BC_JSF_COMMUNICATION_RO provides all authorizations for read access to user data, for authenticating remote users, and several low-level RFC authorizations. For example, users can still change their own password. This role provides sufficient authorization if you do not want to perform administrative changes from the UME: for example, add a new user or change a last name.
¡        SAP_BC_JSF_COMMUNICATION is the same as the above role, but additionally provides authorization to modify and delete all user-related data.