SAP CUA connector changes password in master system AND child systems?

Please confirm if OIM can change the password in both SAP CUA master and child systems through SAP CUA connector. The connector guide mentions the following parameter can be defined in SAP CUA IT Resource.
Parameter: SAPChangePasswordSystem Flag that accepts the value X or ' '
If the value is X, then the password is changed
only in the master system. If the value is ' ', then
the password is changed in both master and child
systems.
This parameter is used by the Reset
Password function.
Thanks!

Hi,
1) You can use report RSCCUSND to distribute users from CUA to child client. Check section "Sending User Master Data to a Child System" in [CUA cookbook|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fe4f76cc-0601-0010-55a3-c4a1ab8397b1?quicklink=index&overridelayout=true].
2) if the user account has not been synced to CUA then you should be able to delete it in child system. The button should be displayed for unsynced users. You can use transaction SCUG to sync users between new child system and CUA. Check section "Transfering Users from New System" in [CUA cookbook|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fe4f76cc-0601-0010-55a3-c4a1ab8397b1?quicklink=index&overridelayout=true].
Cheers

Similar Messages

How can I provision users to SAP CUA with their passwords Disabled?

I need to provision users to SAP CUA with their passwords disabled. How can I configure this if at all?
Thanks!

Thanks for the quick response. I am confirming with SAP team if its permission issue.
Following is the snippet from JBOSS log:
2009-04-14 11:06:26,659 INFO [STDOUT] Running SAP CUA Create User
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): Create User Request
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): userId :00000209, userGroup:,lastName:Employee 209,firstName:Last Name - 209,userTitle:0003,langComm:,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:,decimalNotation:,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:,userType:,RoleProfile:,RoleProfileOption:Role
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] createUser(): Create User Start
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :User 00000209 created
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:102
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] addRoleToUser():Add Role to User
2009-04-14 11:06:29,753 INFO [XL_INTG.SAPCUA] getChildData() :getUserRoles method is Started
2009-04-14 11:06:29,800 INFO [XL_INTG.SAPCUA] getUserRoles() :getUserRoles method End
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725190128, maxLifeAfterPassivation=1200000
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 changed
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:048
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] Role added successfully to the user.
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] changePassword(): Change Password Start
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Password Not Allowed
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:E
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:001
2009-04-14 11:06:31,284 DEBUG [XL_INTG.SAPCUA] changePassword(): chanegPassword eventPassword Not Allowed
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] changePassword():Change Password Error:Password Not Allowed
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():ChangePassword error after user creation:SAP.PASSWORD_CHANGE_ERROR
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():Deleting the User
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] deleteUser(): Delete User Start
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725192222, maxLifeAfterPassivation=1200000
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725194769, maxLifeAfterPassivation=1200000
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] deleteUser(): User deleted SUCCESSFUL
2009-04-14 11:06:43,863 DEBUG [XL_INTG.SAPCUA] createUser(): 00000209:SAP.USER_CREATION_FAILED
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
2009-04-14 11:06:43,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725203925, maxLifeAfterPassivation=1200000
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:44,878 INFO [STDOUT] Running SAP CUA ADD ROLE
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] addRoleToUser() :Add Role
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2009-04-14 11:06:44,878 ERROR [XL_INTG.SAPCUA] addRoleToUser() :User Id :00000209 not exist in target SAP system.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.

HT1430 Pop-up shows name or password is incorrect.   Have changed password on both incoming and outgoing ports, no luck.

Can anyone help?      Cannot receive or send mail, pop-up shows name or password incorrect.   Changed password on both incoming and outgoing, no luck.
Have been at it all day long.     Any suggestions?

Guess what? That's right! I switched on my laptop this morning and the moment I opened Thunderbird I received three emails - one of them informing me that I'd changed my password.
So the problem was clearly at the server end, not mine.
For anybody who is searching the Help Forums looking for help: be aware that you will find many messages like this one and lots of suggestions as to what YOU may have done wrong. The reality is that if you have this specific error message, it is probably a glitch in the system that randomly happens and is fixed, apparently without BT/Yahoo! knowing anything about it.
It IS known about, has been known about for years, and will not be addressed as a problem in the near future.
My recommendation "get a new email address!". If you MUST stay with the btinternet/btopenworld address then get used to the idea that every so often you will not be able to get into your email. Don't panic and don't go changing your settings as this will only confuse the matter when it comes back online - without any warning or advisory.
I say this, not as a rant (although it fills that role as well) but as a genuine suggestion to avoid random problems that you will not be able to fix.
This is the 21st centrury and we still have electronic messaging systems that breakdown randomly and without anybody aparently knowing why, or how to fix it. So much for tomorrow's world, eh?
Bye bye BT/Yahoo! - I'd like to have said "it's been nice", but...

Mashe I cant sign in blackberry ID from my phone helpim trying to but it in option blackberry. ID. Its telling me wrong password. I changed password. 10 times and its still telling wrong password. I tryd to put my friend account it working please help

Mashe I cant sign in blackberry ID from my phone helpim trying to but it in option blackberry. ID. Its telling me wrong password. I changed password. 10 times and its still telling wrong password. I tryd to put my friend account it working please help

Check your password agian. If your friends password /account is working then it is your account information. Maybe you have the wrong username/email combo
Developer for easyDial for BlackBerry Bold & inLink for BlackBerry PlayBook
Find me online via twitter, or on the techfruits.com webpage. Please hit the like button below if what I said helped!

OIM - SAP CUA Connector - Unlocking Accounts

Hello All
We are implementing the Oracle Identity Manager connector for SAP CUA, and have the following concern:
If a user is locked manually by the SAP Security Administrator in a target SAP System (Prod for example), what is to prevent the End User from logging into OIM Self Service and unlocking themselves?
The OIM Connector Doc seems to state that the target system is unlocked regardless of locked state (meaning it sends an unlock request regardless of whether the user is locked or not).
How does this take Maintenance/Downtimes into consideration (where no business/end users should be in the system)? What about fraudulent or suspicious accounts (where the Security team has frozen/locked someone's account to prevent further activity)?
My thinking is that if an SAP Security Admin has locked an account, OIM should not unlock the account. The only unlocks which should take place are for Incorrect Passwords?
Just wondering if anyone has experience with OIM connecting to SAP CUA

>
Nigel Wyman wrote:
> My thinking is that if an SAP Security Admin has locked an account, OIM should not unlock the account. The only unlocks which should take place are for Incorrect Passwords?
>
> Just wondering if anyone has experience with OIM connecting to SAP CUA
Not worked with OIM, but worked with SAP IDM/GRC:
But I was asking why you would use CUA once you will have OIM working ?
1.you should have only a single point of user administration, why dont you lock the user from OIM instead of logging into CUA.
2.In our present project , DEV and QA we are using ACCESS enforcer for all user administration purposes with approval workflows, it works very well. security should not login to the systems without approval.

View and change passwords for sys, system, sapr3

Dear All
1.I need to view the password the for account :
sys, system, sapr3
2. I need to know for how long passwords have not been changed?
. and how can i change these passwords?
Any sugestions??
Regards
Rajesh
Edited by: rajesh sharma on Oct 15, 2008 1:51 PM

Hi Rajesh,
1.I need to view the password the for account :
sys, system, sapr3
Its not possible to view the password, password is always encrypted format stored, if the default has not been changed for SYS, SYSTEM then their password are CHANGE_ON_INSTALL and MANAGER respectively.
2. I need to know for how long passwords have not been changed?
. and how can i change these passwords?
For knowing what date they were changed last,
- connect /as sysdba;
- SQL> select name, ptime from user$;
ptime will give you the last password change date.
you can view at what date the password will be expired by
- select username, account_status, expiry_date from dba_users;
change the password by brtools menu options or directly by chpass.
http://help.sap.com/saphelp_nw70/helpdata/EN/4f/c3883989676778e10000000a11402f/frameset.htm
Note -
Always recommended to use brtools for changing password rather than using the sql commands.
Regards,
Debasis.
Edited by: Debasis Sahoo on Oct 16, 2008 1:09 AM

Changing passwords (aol) master screen problems

Hello
I have been changing passwords today since the warnings of the virus and I am unable use my master screen account with aol since changing the password.
I can use the account on my laptop with no problems but when I try on my iPhone or iPad 2 I get the message "the username or password is incorrect" I have tried to change the password several times and it doesn't verify it, anyone shine any light on this as with all my other aol accounts where I have changed the password it has been fine today!
I have turned the phone on and off along with the iPad several times and waited for the apple symbol to appear but now I am running out of things to try.
Thanks

Oops senior moment I had entered the wrong password.
Hangs head in shame and error and walks away for a cup of tea.

Server fail to start aft changing password of SID ADM and SAPSERVICE SID

Please help, i change password of above 2 users on windows, then server fail to start.
Even after I change back to original password, the system still didn't start.
Please help as this is urgent.

Hi,
sap service is not start in windows due to password change.
click on start -> run -> services.msc
navigate to service SAPSID_<instance_nr>
right click on that -> properties -> logon
provide the correct user password here.
proceed same for SAPOsCol service
regards,
kaushal

I changed my passwords on the sites I frequent on my macbook pro but was told I would have to change passwords on my iPad and iPhone as well. Is this true.

I changed my passwords on the sites I frequent on my macbook pro. Since doing that I have been informed that I would have to do the same thing with my ipad and iphone too. Is this true? Not sure I understand why. Do I just change it to the same password on each?

Any password for an internet site is managed by this site's system. Your device only provides an access to this site.
So if you change password from any device, you'll have to provide your new password for this site, whatever device you use for connection.

I'm trying to log intoi Facebook after I've been hacked, changed password did antivirus scan and I'm locked out

I was on facebook and it was hacked. I notified facebook and deleted all remembered passwords in the system and ran anti-virus. Ever since then I've been unable to log onto facebook. Is this a problem with firefox or with face book itself? When I try to login using firefox I get www.facebook..com/checkpoint and doesn't go any further. I've changed my password and still cannot get into fb.

I kind of thought that was the problem but can't seem to get anything from FB. I appreciate your quick response. Flip

Change password for Apple ID and iCloud is inaccessable

I changed the password for my Apple ID and now cannot logon to iCloud via the browser. I can logon to iTunes and appleid.apple.com but not iCloud. Phone is also affected for iMessage, iCloud, and iTunes.

Welcome to the Apple Community.
Firstly, you need to change your details with Apple, Start here, change your country if necessary and go to manage your account.
In order to change your Apple ID or password for your iCloud account on your iOS device, you need to delete the account from your iOS device first, then add it back using your updated details. (Settings > iCloud, scroll down and hit "Delete Account")
Providing you are simply updating your existing details and not changing to another account, when you delete your account, all the data that is synced with iCloud will also be deleted from the device (but not from iCloud), but will be synced back to your device when you login again.
In order to change your Apple ID or password for your iCloud account on your computer, you need to sign out of the account from your computer first, then sign back in using your updated details. (System Preferences > iCloud, click the sign out button)
In order to change your Apple ID or password for your iTunes account on your iOS device, you need to sign out from your iOS device first, then sign back in using your updated details. (Settings > store, scroll down and tap your ID)

AUDIT action (create, delete, privilege escalation, set and change password from users account and group) users and admins in Solaris 10

Hello.
in Solaris 10 i need auditing process create, delete, privilege escalation, set and change password and etc... from users account and group.
I set settings:
in file syslog.conf:
*.info;mail.none;cron.none;audit.notice            @IP-Remote-syslog-server-SIEM
in file   /etc/security/audit_control:
dir:/var/audit
flags:lo,ad,ex,cc,am,no,fc,fd
minfree:20
naflags:lo
plugin:name=audit_syslog.so;p_flags=lo,ad,ex,cc,am,no
in file   /etc/security/audit_user:
root:lo,ad:no
Now I see in the logs only the fact of a connection via SSH and run processes on behalf of users. Creation. delete users, change passwords for some reason do not is logged.
Many users. For each individual write permissions in the file /etc/security/audit_user not possible, it is likely to forget any new user (or there is a possibility in this file one line to describe the audits for all accounts?)
Where is the mistake?

You are most likely hitting Bug 15779000 user/role/groupadd/mod/del don't audit their use.
And the fix is only available in S11.2.
-- Renaud

ICloud ask you to change password you do it and it doesn't work!!!

Log into iCloud on my Mac book it asks me to change password. i change it and save it. and it still doesn't work. Neither does it work on my iPhone. ow my iMessages or mail works.
Maybe its time for a change of brand !!!

Logged into iCloud via my mac book pro. it asked me to change my password. A added a sign a sign from previous password. I have subsequently tired in vain to reset password via alternative email account but noting is working.

UOM in master ORG and Child Organization

Hi all,
In INV user guide, in "Primary Unit of Measure" section, I read the "Note: If an item belongs to both a master organization and a child organization, and these organizations belong to the same costing organization, the primary unit of measure for the item must be the same within both organizations."
What happend if I configure the diferent UOM in master and child org?

Were you able to?

SAP Business Connector with Java (material master data)

Hey,
I have a question about the SAP BC. What are the steps I have to do, to use the BC with a Java program?
My task is to create a program which downloads material master datas from SAP.
I just installed the BC, and hope, that I did it correctly
Many thanks in advance!!
Kind regards,
Alex
German Version:
Hey,
wie ich oben schon geschrieben habe, habe ich ein paar Fragen zum SAP BC. Ich habe ein Hochschul-Projekt und muss hierfür Materialstammdaten aus SAP herunterladen und mit einem Java Programm ausgeben lassen.
Kann mir vielleicht jemand weiterhelfen, wie die Schritte hierfür aussehen?! Wie verbinde ich den BC mit meinem SAP System? und wie bekomme ich anschließen die Daten mit einem Java Programm ausgelesen?
Ich habe bereits den BC installiert und konnte mich meines Wissens auch richtig anmelden;-)
Ich hoffe, dass mir jemand weiterhelfen kann und bedanke mich schon im Voraus für eventuelle Antworten!!!
Viele Grüße
Alex
Edited by: Rolf Gersbacher on May 19, 2010 10:34 PM

Hi,
I work with SAP BC some time ago... I remember that you configure the connection in SM59 / SICF and the server open a port to "listen" (connect external).
So, your external program can execute functions inside SAP and exchange data.
See some links:
http://en.wikipedia.org/wiki/SAP_Business_Connector
http://help.sap.com/saphelp_nw04/helpdata/en/6a/3f93404f673028e10000000a1550b0/frameset.htm
http://www.thespot4sap.com/articles/SAP_XML_Business_Integration.asp
Best regards,
Leandro Mengue

SAP CUA connector changes password in master system AND child systems?

Similar Messages

Maybe you are looking for