Quantcast
Channel: SCN: Message List - Security
Viewing all articles
Browse latest Browse all 5338

Re: the 'import proposal' option for the LDAPMAP transaction is disabled

$
0
0

You cannot synchronize existing AD passwords to SAP and you cannot redirect the SAPGui logon screen password to probe AD passwords. Not possible.

 

What you can however do is "hook" the password in cleartext before (re)setting it in AD and then send it to SAP as an initial or even productive password (eg. when the user resets their own password in IDM).

 

But none of these are SSO and LDAP sync cannot sync the password. Simply not supported on the SAP side (which triggers the process) and also not on AD side (to return cleartext passwords).

 

Not possible...

 

Cheers,

Julius

 

PS: your duplicated question is locked.


Viewing all articles
Browse latest Browse all 5338

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>