SAP ABAP IMG Activity GRACVC_PSSCONFIG (Maintain Password Self Service)
Hierarchy
☛ GRCFND_A (Software Component) GRC Foundation ABAP
   ⤷ GRC-AC (Application Component) Access Control
     ⤷ GRAC_UTILITIES (Package) Access Control GRC Various helping infrastructure for ABAP
IMG Activity
ID GRACVC_PSSCONFIG Maintain Password Self Service  
Transaction Code S_GF1_13000065   (empty) 
Created on 20100602    
Customizing Attributes GRACVC_PSSCONFIG   Maintain Password Self Service 
Customizing Activity GRACVC_PSSCONFIG   Maintain Password Self Service 
Document
Document Class SIMG   Hypertext: Object Class - Class to which a document belongs.
Document Name GRACVC_PSSCONFIG_DOC    

Use

In this Customizing activity, you can maintain the settings required to enable users to reset their own passwords in the back end system.

When a user creates a request for password reset, the application verifies the user based on the information they maintained for their password self-service settings. Once the application verifies the user, it resets the password and sends an e-mail to the user's configured e-mail address.

After the user resets their password, the application e-mails the new password to them.

Requirements

You have:

  • Set the attribute for inital password as Everywhere in the CUA central system. You can use transaction SCUM to set the attribute
  • Completed the Customizing actitvity Maintain AC Connector Settings, and have also set the connectors as either of the following: HR System or PSS

Standard settings

Activities

To maintain Password Self Service Global Configuration, do the following:

  1. Double-click PSS Global Configuration Values.
  2. Choose New Entries.
  3. Select an authentication source from the dropdown list:
    • HR System
      When you select this option, the application uses the personnel data on the SAP HR system to verify the user.
    • Challenge Response
      When you select this option, the administrator configures the security questions and the users register their answers. A user who creates a request to reset their password must answer the questions as they have registered them. The application only resets the passwords if the user successfully answers all of the questions.
  4. Select a PSS Disable Verification option.
    • None
      Select this option if you want to enable PSS verification.
    • Name Change Self Service
      Select this option if you want to disable PSS verification in case the user only changes their name.
    • Password Self Service
      Select this option if you want to disable PSS verification in case the user changes their password.
    • All
      Select this option if you want to disable PSS verification in all situations.
  5. Enter the Number of Questions you want displayed for the Challenge Response.
  6. Enter the Number of Attempts you want to allow before locking out the user.
  7. Save the entry.

To maintain the Challenge Response Questions, do the following:

  1. Select a PSS ID.
  2. Double-click Challenge Response Questions.
  3. Choose New Entries.
  4. Enter the question.
  5. To set the question as active, select the Status checkbox.
  6. Save the entry.

If you chose HR System as the authentication source, then maintain the PSS HR System settings.

Example

Business Attributes
ASAP Roadmap ID 201   Make global settings 
Mandatory / Optional 1   Mandatory activity 
Critical / Non-Critical 1   Critical 
Country-Dependency A   Valid for all countries 
Maintenance Objects
Maintenance object type C   Customizing Object 
Assigned objects
Customizing Object Object Type Transaction Code Sub-object Do not Summarize Skip Subset Dialog Box Description for multiple selections
GRACVC_PSSCONFIG C - View cluster SM34  
History
Last changed by/on SAP  20100719 
SAP Release Created in 600