Dear all,
we have the following Basic problem or question regarding ITS-based ABAP Services provided via browser to internal and external customers:
The user call the ITS via URL "https://<host>:<port>/sap/bc/gui/sap/its/it13?sap-client=03&sap-language=en" his browser.
To access the Service a simple login Dialog appears for entering the credentials (UserID + Password).
The problem with this simple Dialog is that after resetting the users password this initial password status seems not to be checked here.
That means, that the user is able to login with this initial password and he is not forced to change the password.
In difference to this the intended behavior is provided for example when the SAP Standard ITS Service "webgui" is launched by the user:
The user launches der Service via URL "https://<host>:<port>/sap/bc/gui/sap/its/webgui?sap-client=03&sap-language=en"
In this case an additional first SAP WebAS login dialog appears where the users has to click on a Login-Button. This login button opens
another login dialog as a popup where the user is able to enter his credentials. But if the password has an initial status the user is
forced afterwards to change his password.
So the login behavior of the webgui Service is what we also want for the any other ITS Service. We've already compared the service properties and
settings (SICF), but we could not find any difference.
What can we do to change the login behavior for the ITS services ?
Thanks in advance for any kind of help !
Joerg
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.