SAP GRC 5.3 CUP: Initial Password not displayed

Hi,
when a user account is created in the backend system CUP sents automatically the user ID and a link such as
http://<Server>:50100/AE/showPassword.do?userId=NEWUSER30&ReqNo=1061&System=ERD
to the user's email adresse. When opening the link no password is displayed.
Could anybody help?
Marco

Hi Marco,
Have you checked the Send Password in Mail option is to Yes at Configuration>Workflow>Email reminder-->Closing Tab.
This option is coming only in 5.3 version not in 5.2.
Regards,
Jagat

Similar Messages

USF on iTunes U collections such as Sustainability and iteach Initiative are not displaying new items even days after they are uploaded to the collections. The items show in the Preview of the collections but not Live view. not displaying

USF on iTunes U collections such as Sustainability and iteach Initiative are not displaying new items even days after they are uploaded to the collections. The items show in the Preview of the collections but not Live view. not displaying

Greetings;
This seems to an ongoing issue (see related discussion link). We've been experiencing the same update lag since last Friday. The new additions to the Collection appear and are accessible in both the iPad and iPhone applications, but even though they additions appear in "Quick View", the material doesn't appear in the Collection itself. Apple is aware of the issue and is investigating. All the best...
Syd Rodocker
Tennessee State Department of Education
https://discussions.apple.com/message/15461971#15461971

SAP GRC 5.3 CUP: Approver Determinator "Super Access Owner"

Hi,
when configuring a stage, a standard approver determinator called "Super Access Owner" could be selected.My question is where to specify the Super Access Owner in SAP GRC CUP? In the Config Guide of SAP GRC AC 5.3 a hint explains on page 145
"If you select Superuser Access Owner as the approver determinator, the system
fetches the configured owner from the SAP system where the Superuser Privilege
Management is installed and assigns the request to that particular approver."
I do not really unterstand where to specifiy. Is it the former FireFighter in the backend.
Did anybody user this Approver Determinator already?
Thank you in advance.
Marco

Hi Marco,
Yes this approver is defined in the backend Firefighter which is now Super User Privelege Management. The Firefighter ID owner will be taken as the approver if we select Super User Access Owner in the CUP request. This option is basically being provided for Integration of Compliant User Provisioning and Super User Privelege Management for SAP GRC AC 5.3. You may now create a request to assign a Firefighter ID to a Firefighter in CUP and do not need to go to SPM for the same.
In case you do not want to use this approver, please create a Custom Approver Determinator for the same.
Hope this helps.
Harleen

SAP GRC 5.3 CUP Archiving Requests

All,
I have a question about archiving and re reviewing requests after they are closed (approved/rejected).
Let's say I create a request, my manager performs a risk analysis and SOD violations occur, but my manager approves the request. If at some point (say a year down the line) I want to review the request to see what the conflicts were would the request: a. still be in CUP to review and b. would it show the conflicts that were identified at the time.
How would archiving play into this scenario as well.
Unfortunately, I cannot test this in CUP as it is time sensitive, but I'm hoping someone has come across this before.
Thanks,
Kunal

Hello Kunal,
You can test this in a development by re-creating the scenario and archiving the completed request. The length of time archived is not an issue.
In answer, yes you can pull up the archived request information (provided that you did not delete the archive) and you can see what were the recorded SOD risks at the time. However, the request itself will not tell you the individual transactions that caused the conflicts and may no longer be accurate if the risks and business functions have changed in their content since the time of the request.
This said, GRC AC seems to be changing in "leaps and bounds" with recent support packs... Who knows if the archiving process will change in the future.
Best Regards, Dylan

SAP GRC 10 SP13 PC- AM scenario not available for assigning to connector

Hello Expert,
We are on GRC 10 SP 13 PC . We want to add connector to AM connector group under SPRO-GRC_Common Componenet Setting - Integration framework - Maintain Connector and Connector types - Define Connector groups.
I remember all other groups ( AC related) which are available in this area are coming because of activation of BC sets. I have activated all the BC sets related to PC but AM group is not available.
Any Suggestion?
Kind Regards
Asheesh

Hello Asheesh,
AM Integration scenario is available in next path in SPRO.
SPRO -->GRC --> Common Component Setting - Integration framework -->Maintain Connection Settings
Regards,
Gowrinadh

Gmail usernames and passwords not displaying correctly - is the issue with Firefox?

I have 3 email accts and when I click username in Gmail those 3 would show and passwords would be remembered automatically. Now it shows these 3 and 2 others that have been used before, plus NO passwords displayed. In the past if this happened I refreshed page and it went back to the 3 accts - this is no longer happening. Could it be a firefox issue?
Also my autofill in Gmail is no longer working and I have seen other inquiries about that. Is there any info on how to fix these???

This is a known issue in Firefox 4 beta 12. You could wait til' the RC comes out, or you could grab one of the latest nightly builds availible here that fix this problem: ftp://ftp.mozilla.org/pub/firefox/nightly/latest-mozilla-central/
Just a note though, nightly versions of firefox are generally less stable than betas or releases. I am waiting for the Release Candidate to come out myself. (Should be early next week)

(SAP BW 3.5) Navigate attributes did not display value in BEx

Dear SAP BW Expert,
I created simple queries using BEx to display data in an InfoObject. This InfoObject composed of many attributes which were set to navigate attributes. I already loaded data into this infoobject as well. After I check data in RSA1, all data seemed to be in place.
Unfortunately, I'm not quite sure whether I was missing any steps since those data assigned to those attributes could not be display via BEx.
Any suggestion would be appreciated.
Thank you very much.
-WJ-

I already tried to re-activate. Unfortunately, I still got the same results.

SAP BW query - new keyfigure added but not displayed in CR

Hello Experts,
I´m using a CR2008-Report on top of a BW Query. Now I´ve added a new key figure to the query, but in CR the new key figure isn´t displayed. But it is displayed if I open the query again as a second 'table'. Is there a possibility to get the new key figure displayed also without opening the query as a second 'table' ?
I don´t want to 'reconfigure' all my reports in the future completely if there are new key figures !
Thanks for your help in advance !
Frank

The same applies if I change the selection critiria for a character infoobject: e.g. there was a fixed selection in the filter, and now I want that the user is able to select freely via a variable. It does only appear in Crystal Report if I add the query again. So do I have to rebuild the whole report then ???

Cutover Plan SAP GRC AC

Hi all,
I´m interested in getting some templates for planning and describe a detailed Cutover Plan for SAP GRC Access Control, which includes all activities for performing in each one of the modules for SAP GRC (RAR, ERM, CUP and SPM).
Anybody has some template or related information for prepare cutover plan for SAP GRC AC?
Thanks in advance,
Santiago

Hi Santiago,
here you could find a AC5.3 Project Plan:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/b00a372f-ddb7-2b10-88aa-d6eaae69a756
And this is the Pre-Installation Checklist:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/50692df1-67da-2b10-2995-84a0d0c82193
Best,
Frank

Form text item initial value not taking effect

Hello,
Sorry for the simple question, but I'm at a loss.
I'm trying to present a system date on my form using $$DATE$$ as the initial value of a text item. The form will not display it. Am I running up against a bug, or is there a block setting that might be getting in the way? Possibly an OAS issue? The item is in a control block, and the form is insanely simple. It makes use of menu as well.
Any help is appreciated,
Jim

I tried setting the initial value to $$DATE$$ in a control block item in Forms 10g (9.0.4), and it worked fine. I think the online help is referring to creating a record in a block (not the database), which happens in a control block as well as a base table block.
Not sure what version of Forms you are using, but in the unlikely chance that you're still on 6.0, there are some bugs (1046279, 2970983) filed on 6.0 about the initial value not displaying when the text item is subclassed from an object library. If that's what you're experiencing, you should be able to fix it by upgrading to 6i.

SPM in CUP in a SAP GRC AC 5.3 -- "Approver not found" & "Path not found"

hello,
I have a problem when I try to do a request.
I have configured the SPM in the CUP in a SAP GRC AC 5.3
I gives me an error about "Error creating request. Approver not found ". When I took out the Manager in the Stage it gave me this error in the request "Error creating request. Path not found".
Best regards.
Pablo Mortera.

You can either type in the configuration, like the what option you selected for approver (CAD or role or...etc), or other way is to capture the change log which shows what was the configuration for that stage....
(Configuration -< Change Log -> Search Change log)
Cheers !!
Zaheer

SAP GRC CUP password issue

Hi,
to get user password, i set email reminder, closing as send password in mail No and password display period : 0.It throws a password as sap default string .How can it be standard password,so user can reset by entering it.In SAP GRC 5.3 AC-CUP 5.3_05.0, I can't see password self service tab too.Is there any better way so user can get password in email as sap standard in 8 words (number , letters or any special characters as set like us).

when i try to create request type for password self service. i have only these actions to select
CREATE_USER Create User
CHANGE_USER Change User
DELETE_USER Delete User
LOCK_USER Lock User
UNLOCK_USER Unlock User
ASSIGN_ROLES Assign Roles
SUPER_USER_ACCESS Super User Access
USER_DEFAULTS User Defaults
i can't see any action for password self service in configuration->request type-> create option.please answer it.

Initial password for SAP* in SAP NetWeaver 2004s ABAP Edition

Hello,
I have just installed the SAP NetWeaver 2004s ABAP Edition on my PC and I want to setup some new clients to simulate an ALE model.
Does anyone know the initial password for SAP* ?
I have already tried PASS and pass because I know it is case -sensitive now but it did not work.
Thanks a lot.
Wim Van den Wyngaert

Hi,
initial SAP* password is 06071992
DDIC is 19920706

Initial password when LDAP user created i SAP?

Hi,
I'm about to configure LDAP integration with SAP, where users that exist only on the LDAP server are created in SAP.
Are any initial passwords automatically set for these users in SAP, or will an administrator have to go in and set an initial password for all created users?
Thanks, Oscar

Hi,
I assume you will use the LDAP synchronization in an ABAP system. Here you have to maintain the fields to be synchronized. The password field is typically not synchronized but you can fill in the logondata hashvalue. I never tried to get the hashvalue out of LDAP because LDAP and SAP may use different hash algorithms. The better way is to set a fixed value in the mapping. You can use SAP functions to maintain the hashvalue.
Transaction for maintaining the mapping: LDAPMAP.
Regards
Rainer

SAP Portal unable to recognize AD requirement to change initial password

Hi,
We configured Active Directory server (2008 R2) as UME for SAP Portal (Netweaver 7.01 SP7). We matched as many of the security parameters as possible* (ex. minimum password length, require one number in password, etc.). The AD parameter "User must change password at Next logon" is set ON. However, upon attempt to login to SAP Portal with the initial password that was set in AD we are not prompted to change the password. Rather, the SAP Portal logon attempt fails with message: "Authentication Denied"
Has anyone dealt with this problem before?
Other information:
*Our MarketPlace researched indicated that the SAP Portal parameter "ume.ldap.security_policy.password_change_required" (which would correspond to the AD parameter mentioned above) is no longer an available parameter for our SAP Portal version (Netweaver 7.01 SP7).
In our version of SAP Portal, the AD parameter "User must change password at Next logon" has one parameter which is similar, but does not directly correspond. The SAP Portal parameter which we do have is "No password change required". Notice this is the logical opposite of the AD parameter: AD says to require the password, whereas SAP Portal says it's NOT required. Therefore, when the AD parameter is set to ON, this results in the Portal parameter being set to OFF. Even still, we face the login failure.

You have to note here that implementing SAP IDM is only ONE of the possible options you have. The implementation of IDM in itself is a huge undertaking because of the number of systems and the decision making process involved with it.
In one of my previous implementations, when SAP IDM was not around, we had Tivoli Access Management tools which took care of the password problems.
even though we implement IDM and deploy IDM UI on Portal , still user should change password before it expires on AD right ?
Even with IDM in place, user will not be able to login to SAP portal with an expired AD password. However, in our case, we provide a link on the logon page of SAP portal to the IDM password self service application which will allow the user to change the password.
Does IDM has any feature like sending notifications before password expiration period ?
I don't think it does - however I have not explored this option in IDM since most of our users do not have email addresses and we cannot send a reminder. You should be able to create a task (with some customization) in IDM to achieve this.
Also will the IDM implementation help us in creating users with option "User should change password at next logon" on AD ?
Yes - IDM does create users with option "User should change password at next logon" in AD.
With IDM in place and tied to AD, it should be the central place of creating users. It is recommended NOT to create or manipulate the users in any target systems (SAP, AD, etc). IDM should be taking care of all the user provisioning activities.
is this like a work around to allow users to change password from Portal before it gets expired on Active Directory(AD) ?
This is not a work around - it is rather a full blown identity management solution for all your company needs.
You will get a lot of your IDM specific questions answered in the Identity Management forum.
Thanks,
Shanti

SAP GRC 5.3 CUP: Initial Password not displayed

Similar Messages

Maybe you are looking for