SAP User Logon Management

There are system profile parameters used to manage SAP user log-on.

System Parameter:
A set of system values are used to manage your SAP system like how we use "System Registry" in windows.

Types of system parameter:

1. Dynamic - Application server restart not required
2. Static - Application server needs to be restarted to parameter change effect

Setting up system parameter.
RZ11 tcode used to manage system parameters in SAP.

Enter RZ11 tcode

  

Enter parameter name "login/fails_to_session_end" and click display.

 Below screen shows the current value set for the parameter by the administrator 

Click Change/Display icon and make desired changes

Below are some of the system parameters which is used to manage user login 

• login/fails_to_sessions_end: This parameter specifies the number of times that a user can enter an incorrect password before the system ends the logon attempt. The parameter is to be set to a value lower than the value of parameter

• login/fails_to_user_lock: This parameter specifies the number of times that a user can enter an incorrect password before the system locks the user against further logon attempts. Default value is 12. You can set it to any value between 1 and 99 inclusive

• Login/min_password_lng: Define the minimum length of the password used by the user, Default value: 3; permissible values: 3 – 8 

• Login/disable_multi_gui_login: Controls the deactivation of multiple dialog login 

• login/failed_users_auto_unlock: Defines whether users locks due to unsuccessful login attempts should be automatically removed at midnight. Default value: 1(lock applies only on same day); permissible values: 0, 1