Provisioning issues with password changes

I have installed and configured IDM7.1+sp3 with our AS Java portal. Most features seems to work OK, except:
1.1. Changing fullname, display name, address, etc work - but salutation or title info doesn't display correctly (only when language independant).
1.2. Can lock the user - but not unlock.
1.3. Can change password (self service or via Management tab) - but password "disappears" and user can't login again via the UI or directly thru the LogonGUI.
1.4. If the user's password expires, he gets prompted to change it - this change works fine.
After "devouring" all the documentation I could fine... I read in the Release Notes the following:
2.1. Users are authenticated by the SAP NetWeaver AS Java (and not by the Identity Center). The password policy of the Identity Center is not used.
      = enabling or disabling "password provisioning" in the Password Policy tab makes no difference then?
2.2 The login task does no longer exist since the authentication is done by the SAP NetWeaver AS Java (UME).
      = ok I get this part...
2.3 Change of password is handled by SAP NetWeaver AS Java (UME) and the change password task is no longer available.
      = so the Password Reset tab is also "pointless"?
2.4 A user's MSKEYVALUE is used as the UME logon ID.
      = right
2.5 Password reset is handled by SAP NetWeaver AS Java. See SAP NetWeaver Identity Management Identity Center Implementation Guide u2013 Self-service password reset for details
      = (what should I do with this?) I did get this working but stopped with some error about the "encrypt password".
My SAP landscape is pretty standard (no custom fields/attributes) - so the IDM Provisioning framework should work "out of the box" - in my understanding...
Any ideas?
Sorry about the multiple postings - issue with proxy server. Pls ignore/remove the extras.

Hi.
I try to give some answers based on my experience below:
1.1. Changing fullname, display name, address, etc work - but salutation or title info doesn't display correctly (only when language independant).
>> Have you checked that the user has correct language set in Java UME? Also check that in Presentation page of the corresponding Attribute the Display name parameter is set with corresponding languages used.
1.2. Can lock the user - but not unlock.
>> Can you see any errors e.g. in Job Log? Would help to solve the issue
1.3. Can change password (self service or via Management tab) - but password "disappears" and user can't login again via the UI or directly thru the LogonGUI.
>> The reason might be the encryption of the password. Typically the UI should take care of the encrypting the password into MX_ENCRYPTED_PASSWORD attribute, especially when you're implementing tasks like Self Service Password Reset. I've noticed that when I disabled the Enable Password Provisioning option for the Identity Store, I got rid of the error regarding attribute MX_ENCRYPTED_PASSWORD and UI automatic encryption started to work. (In my case two way pwd provisioning is not needed) Otherwise if you have issues with encrypted password in your custom tasks, check whether the value is encrypted and use java script to encrypt the password when reading the value form the UI field and saving it to MX_ENCRYPTED_PASSWORD attribute, if applicable.
Hopefully this helps you even a bit.
Br. Jukka

Similar Messages

  • Email issue with password change

    I recently had to change my email password.  Now I can't get mail on my IPad.  When I go to settings under mail, contacts, calendars, it is not highlighted and will not let me open it.  I have the same issue with messages and facetime not being highlighted.  My email works fine on all other devices, including my iphone.

    Do you currently have Settings > General > Restrictions > Accounts (under the 'allow changes' heading) set to 'Don't Allow Changes' ? If you do then change it to 'Allow Changes'

  • Issue with PO change output - Service line items

    Hi All,
    This is issue with PO change output. We have PO with line item 10, 20 and item 10 has 4 service line items. PO is approved and initial print out is taken.
    Some one goes and makes changes to 1st service line items of PO line item 10.
    A change output gets triggered. When this output is printed, it prints line item 10 details. This is standard functionality as this item is changed. But its printing all the service line items for this PO line item. Consider a case where there are 3000 service lines for a PO item. If I add 1 service item to this PO line item, the change form prints 3001 services for that line item. There were no changes done to first 3000 service line items.
    Currently PO change form takes care of changes at PO line item but it does not take care of changes at service line item level.
    Is there any setting that needs to be done for this so that it only considers the changes at Service line item level also.
    Regards,
    Shahu

    If you're using a standard form, send a message to SAP. Otherwise make a change in the form.

  • Regarding the Cheque printing in SAP Script. Issue with Layout Change.

    I have to modify the layout of a predeveloped script.
    The issue with the existing one is that, the Labels (on the window, that is printed) and the data (corresponding to it) are not on the same line.
    To be more clear, I have like this on the cheque,
    Payee : _______________________
    Amount : ____________________
    The Data corresponding to the Pay & Amount is not in the respective line (as I shown above).
    How can I get that both on the same line.?
    Shall I need to modify the layout or what else to do ?
    Pls. guide me.
    Your guidance is appreciable.
    Edited by: ravikanth seal on Mar 9, 2011 5:09 AM
    Edited by: ravikanth seal on Mar 9, 2011 5:10 AM

    Hi niraj gadre ..
    Ur idea may not workout fir me.
    My idea is :
    Can I use any formating options in the corresponding window's text elements..
    Pressing F9 on the windiw (in the Windows list) displays the Text Elements (Goto Edit-> Text Elemets on the Window chosen) in the Windows list.
    Here can we do any formating options, so as to change the layout alignment of window's Text Elements ??
    Guide me please.
    Your guidance is Appreciable
    Thanks.
    Edited by: ravikanth seal on Mar 9, 2011 7:55 AM

  • Serious issue with password manager - mouse selection in MS word 2007

    A little while ago, after installing some thinkvantage updates, I started to loose selection with the mouse in microsoft word 2007 after few minutes of usage (and derivatives such as outlook). I have a T61 with Windows 7 64 bit ultimate.
    I did many internet searches and surprisingly many other users who had this issue were Lenovo users so I'm not even sure if this issue is windows 7 specific.
    Disabling totally the password manager solved the problem - so there might be a serious issue there...
    Erik.

    Confirmed here http://forums.lenovo.com/t5/Windows-7-Discussion/Weird-issues-with-T61-and-Win-7/td-p/179635
    I forgot to subscribe to the topic

  • Issues with speed changing on clips

    i have a issue with speeding up clips. ive exported a slideshow and them imported it into imovie but noticed it was a bit too long..i tried speeding up the clip but when i do and try to play the clip it just shows a black screen..however if i hit backspace and revert it back to original it plays fine..any ideas whats going on? this is soo frusterating to go back and for between the two programs and be off by a few seconds? ?thanks

    well the audio built into the slideshow clip im not worried about..but yes bascially its a bit too long..and for some reason the speed tool will change the width of the clip to a perfect length but then when i go to play on it and check it..i just get a black screen..its just quite irritating to have to go back and forth exporting and cause im 8 seconds to long or whatever you know. thanks everyone hopefully my descrition is better this time.
    i have to try a regular video clip and see what happens..it may only be a iphoto slideshow issue.

  • OIM-OID provisionning issue with external plug in with AD

    Hi OIM/OID Guru's,
    We are using OIM with OID connector and having external authentication plug-in feature of OID with AD. Here we are using OID for user profile storage and doing password validation by using external plugin through AD however we have been
    facing one issue which is mentioned below :-
    Whenever we are creating any user in through OIM and found that user is provisioned to the OID target source but populating wrong value of attribute orclSourceObjectDN in OID process form:-
    orclSourceObjectDN = cn=OIDTEST3,CN=Users,DC=oracle-test,DC=oracle,DC=com
    correct value should be orclSourceObjectDN =cn=OIDTEST3,CN=Users,DC=oracle,DC=com
    we don't have any container in OID with DC=oracle-test however not sure how the process form is picking up this value?
    However could you please put more light why it is appending wrong DN in OIM process form? Where should i check for this from OIM side?

    Hi Dear,
    thanks for your reply and we are using OIM 9.x version. Checked Root DN value as you suggested (see below snap shot for oid resource definition):-
    Admin Id     cn=username
    Admin Password     *******
    Group Reconciliation Time Stamp     
    Last Target Delete Recon TimeStamp     
    Last Target Recon TimeStamp     
    Last Trusted Delete Recon TimeStamp     
    Last Trusted Recon TimeStamp     
    Port     6060
    Prov Attribute Lookup Code     AttrName.Prov.Map.OID
    Prov Group Attribute Lookup Code     AttrName.Group.Prov.Map.OID
    Prov Role Attribute Lookup Code     AttrName.Role.Prov.Map.OID
    Role Reconciliation Time Stamp     
    Root DN     DC=oracle,DC=com
    SSL     false
    Server Address     My server name
    Use XL Org Structure     false

  • Issue with the change pointer  for the reduced message type ZMATMAS

    Hi All,
    I have created reduced message type ZMATMAS for the MATMAS to create a Idoc when change or insert material master data fields( MARA-LAENG, MARA-BREIT, MARA-HOEHE) . My Problem is that the Idoc is generated with the status (03) but the fields(LAENG, BREIT,HOEHE)  are not getting fill with the values. They are always filling with the values  '/'). I have done the following steps to create idoc for the change pointer. Please check whether i have missed some steps.
    1.     Create reduction maintenance ZMATMAS  (Tcode BD53)
    keep the default selected segments E1MARAM, E1MAKTM
    2.     Add following data to maintain table view for the message type ZMATMAS  (Tcode BD52)
    Object      Table Name     Field Name
    MATERIAL       MARA      KEY
    MATERIAL     MARA     LAENG
    MATERIAL     MARA     BREIT
    MATERIAL     MARA     HOEHE
    3.     Activate particular change pointer in BD50
    Message Type       Active
    ZMATMAS         yes
    4.     Activate change pointers u2013 Generally (Tcode BD61).
    5.     Assign Segment fields to change document fields (Tcode BD66 )
    Segment Type     Field Name     Object     Table Name     Field Name
    E1MARAM     BREIT     MATERIAL     MARA     BREIT
    E1MARAM     HOEHE     MATERIAL     MARA     HOEHE
    E1MARAM     LAENG     MATERIAL     MARA     LAENG
    6. I have done the distribution model settings (BD64) and  the idoc configurations
    1.     Logical System
    2.     RFC destination
    3.     Create port
    4.     Create partner profile
    7. I changed the fields in material master data(Tcode MM02)  and I executed the Tcode BD21.
    Idoc is generated but the fields are not getting fill with the values
    (Note: some fields  are filled with values e. g material number, material description)
    I checked the Idoc data segment E1MARAM (WE02)
    Fld name   Fld cont.
    LAENG       /
    BREIT       /
    HOEHE      /
    Can you please let me know the issue
    Prad

    Issue is solved when I select the segments and the fields in the segments (Tcode :BD53)
    Prad

  • I have an issue with passwords when I first type them in any social or personal site, how can I hide the passwords when im typing so no one see them...

    Well the thing is that when I open any site that requires passwords everyone can see what I´m typing instead of appearing dots like in old version for example:
    username: littlegirl
    password: hjy --> this is what i dont want isntead of appearing words i want dots
    just after typing and entering dots appears where can i switch this?

    Hi,
    Please check if this happens in [https://support.mozilla.com/en-US/kb/Safe%20Mode Safe Mode]. Safe mode disables the installed '''Extensions''', and themes ('''Appearance''') in '''Tools''' ('''Alt''' + '''T''') > '''Add-ons'''. Hardware acceleration is also temporarily disabled - the manual setting is '''Tools''' > '''Options''' > '''Advanced''' > '''General''' > [https://support.mozilla.org/en-US/kb/Options%20window%20-%20Advanced%20panel?as=u '''Use hardware acceleration when available''']. All these settings/options/add-ons can also be individually or collectively disabled/enabled/changed in Firefox normal mode to check if an extension, theme, option or hardware acceleration is causing issues. Disabling/enabling hardware acceleration, and some types of add-ons in normal mode may require a Firefox restart.
    [http://support.mozilla.com/en-US/kb/Uninstalling+add-ons Uninstalling Add-ons]
    [http://kb.mozillazine.org/Uninstalling_toolbars Uninstalling Toolbars]
    [https://support.mozilla.com/en-US/kb/Troubleshooting%20extensions%20and%20themes Troubleshooting Extensions and Themes]
    [http://kb.mozillazine.org/Problematic_extensions Problematic Extensions]
    [https://support.mozilla.org/en-US/kb/Options%20window Options]
    An easier method would be to consider the [https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems Reset Firefox] feature via '''Help''' ('''Alt''' + '''H''') > '''Troubleshooting Information'''.
    (To revert to the previous profile, close the new profile, start Firefox and choose the '''*.default''' profile. While the [https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles Profile Manager] is open, you can also delete the newly reset profile (the one containing random numbers)).
    [https://support.mozilla.org/en-US/kb/Managing-profiles Managing profiles]
    [https://support.mozilla.org/en-US/kb/Profiles?s=profile&r=2&e=sph&as=s Profiles Howto]

  • Issue with Attribute change run

    Hi All
    today one of my team memeber has killed attrribute change run, after that when we tried to use option maintain master data, a message were coming attrtibute has cancelled, please re run, even we were not able to load same infobjects, getting message, master data is locked, when it tried to see data in p table then i was getting few entries having delate and insert image( example for infoobject 0customer for customer number c100 two entries one with d flga other one with in flag.)
    First i went in t code se14, i put all tables name then cliecked on activate and adjust data.
    Even though problem persist,
    Also i was not getting any infobjects in lsit( from rsa1-> tools-> attr change run)
    Then i created one dummy process chain with process type attr change run and included only inoobject with which i was facing data load issue.
    Please advice on my step.
    Thanks,
    Prem

    Hi,
    Goto RSATTR Tcode -> Click on Tab Monitor and Start Terminated Change Run -> system will open a new screen -> here you can see the failed change run, please rerun this failed change run and then try to load data, after successful change run things will be normal.
    SAP Clearly suggest  NOT TO KILL OR CANCEL Change Run Job. If this don't solve you issue, you may need to look for some SAP Note.

  • Issue with pictures changing from light to dark

    This is hard to explain,
    I finish editing my pictures, save as PSD and a 2nd as jpeg.
    i view the picture in windows live gallery (windows 7 64bit) and it has changed to a dark deep contrast.
    I open the jpeg or the PSD file and they both appear as i originally saved them until I select/ click on it. and i get the darker deep contrasted image.
    I have tried to have Photoshop elements 9, in preferences set to windows color and I tried it at Adobe no difference.
    Jpegs are saved as sRGB but it is affecting all images, fine while editing but when saved and reviewed it changes and when opened i get to different contrasting views of the same image when selected. This is really anoying me as you think your done and it looks completely different when you review it. HELP!!
    please keep your helpful comments to a basic understandable level.

    I always recommend sticking with sRGB from the point of shooting photos, through editing and printing. It’s pretty universal and if you keep your workflow settings as sRGB it will avoid profile conflicts.
    Start with the elements editor and check your workspace settings by clicking:
    Edit >> Color Settings
    Click image to enlarge.
    Then click on the Windows Start button and type Color Management and press return.
    Check all of your settings are consistent.
    Finally check your profiles when saving files in the Editor.
    If you keep everything consistent you should have no problems.

  • Issue with PO change and message determination

    Hi Gurus,
    I have an issue while changing the PO which as below:
    In a Z program, calling BAPI - BAPI_CREATE_CHANGE to change few fields of PO and have set below two parameters of BAPI to 'X' as the requirement is NOT to determine and execute output types.
    NO_MESSAGING = 'X'
    NO_MESSAGE_REQ = 'X'
    The issue is - Though above two parameters' values set to 'X', messages are getting determined and executed.
    Please let me know if you have faced similar issue and what steps you followed to resolve it.
    Regards,
    Hiren

    If you're using a standard form, send a message to SAP. Otherwise make a change in the form.

  • Issue with Attrbute Change Run in BI 7.0

    Hi All,
    I have loaded a few master data objects as well as some custom master data objects and have found that they do not always show up in the list when you go to apply the attribute change run to something you have just loaded. 
    For instance I have just loaded a custom object from a DSO and if I click on manage on the attribute the load is there but I am not seeing any data in the object, then if I go to apply the attribute change run in the tools menu.  The infoobject does not show up in the list???
    Has anyone else run into this issue.  I have done a search but could not find anything that answered my question.
    Thank you!
    Caroline

    Hi Caroline,
    If the hierarchies and attributes of characteristics that belong to an InfoCube have been changed, you have to make structural changes to the aggregates to modify the data accordingly.
    In this task, you can perform the attribute change run ad hoc.
    http://help.sap.com/saphelp_nw70/helpdata/en/80/1a67ece07211d2acb80000e829fbfe/content.htm
    After each full load of master data, if you want to run attribute change run for an object eventhough the object does not show up in the list.  Go to se38 Execute the program RSDDS_AGGREGATES_MAINTAIN. In selection, Info object list - enter the infoobject name then execute it. Will give a pop-up message Hierarchy/attribute change successfully carried out.
    Edited by: Priya.D on Mar 11, 2010 6:16 AM

  • Issue with the change of GL Account in MIRO.

    We are having a situation where user Creates a Purchase order against a Cost Account and thus have a cost center as one of the account assignments. But when it comes to to MIRO, user changes the Cost Account to Balance sheet Account and posts the document.
    The Miro documents post against the balance sheet with the cost center and system does not give any warning or error.
    Any ideas on how to either stop the user from changing the GL in MIRO or make sure that it throws an error.

    You could set up FI validations to make sure that when you enter a balance sheet account that you check the company preference. That could be no cost center or require a profit center. You define your preference. Use tcode MIRO and check balance sheet type account then check to be sure that cost center is not used. Validtions are in OB28.
    pls assign points if helpful as a way to say thanks.

  • App Store problem with password change after download started

    In process of downloading app on new iPad.  Had to change Apple ID password.  Can't get download to finish.  App circle keeps spinning. 

    In process of downloading app on new iPad.  Had to change Apple ID password.  Can't get download to finish.  App circle keeps spinning. 

Maybe you are looking for

  • Issue: Upgrading from 11i to R12 - zxmiggltaxopts.sql

    Hi, we are upgrading from 11.5.10.2 to 12.1.1. During upgrade patch, one of the worker zxmiggltaxopts.sql has failed with below errors: sqlplus -s APPS/***** @/orafinx/apps/apps_st/appl/zx/12.0.0/patch/115/sql/zxmiggltaxopts.sql declare ERROR at line

  • How to render multiple lines of text?

    Hi, I have a string variable in a backing bean,which holds multiple lines of text with newline character as the seperator. I have to display it in my jspx page. Which component is suggestable? Thanks, Lokesh.

  • How can I print to a wireless printer with Ellipsis 7?

    I am hoping it will behave like my phone and recognize that there is a wireless printer in the room. Since I couldn't figure it out, I downloaded Cloud Printer, but for that your computer must be turned on and I can't print anywhere else, even given

  • Customer carrier account numbers

    Hi, We have a lot of customers with collect account numbers for UPS, FedEx and DHL. how can I manage this in SAP? As it is account number given by the customer I don't want to manage them as a partner function whereas this would mean that I have to c

  • How to hide command pront in SAP screen

    Hi, I have a requirment that i need to hide the command pront in SAP screen, it is very very urgent for me, please help me. Reward for every usefull answer. Saleem.