SAP Security Tip: We can customize Automatically Generated Passwords in SAP for Better Usability.
When creating users through SU01 or SU10, SAP can automatically generate highly secure passwords. By default, these passwords are 40 characters long and include a mix of letters, numbers, and special characters. Although this provides strong security, such passwords may be difficult for end users to enter accurately, increasing the likelihood of login issues and account lockouts.
SAP allows administrators to fine-tune these settings through the PRGN_CUST table (maintained using transaction SM30). The following parameters can be adjusted to match organizational security policies and usability requirements:
• GEN_PSW_MAX_LENGTH – Maximum password length
• GEN_PSW_MAX_DIGITS – Maximum number of digits
• GEN_PSW_MAX_LETTERS – Maximum number of letters
• GEN_PSW_MAX_SPECIALS – Maximum number of special characters
For example, instead of generating a 40-character password, you may configure SAP to create a compliant 15-character password such as g8Ydu7PFUGqf=Q), which contains 2 digits, 11 letters, and 2 special characters. This approach maintains security while making passwords easier for users to handle.
The key takeaway is that SAP provides the flexibility to balance security, compliance, and user experience. By thoughtfully configuring password generation rules, organizations can reduce support tickets and lockouts without weakening their security posture.
