Password verification fails using this password policy for SAP application

[ruchika]

I have a requirement to create a password policy that fulfills below criteria:

• At least 1 character(1 upper case, 1 lowercase), 1 digit, 1 special character
• Minimum length 14
• Should not have repetitive characters, digits like 'aa', 'AA', '11'
• Should not have sequential characters like 'ab','AB'

I am using below regex in password policy but while creating accounts it gives password verification failed. Can you please let me know the issue.

^(?=.*[A-Z])(?=.*[a-z])(?=.*[!@#$%^&*()-+=])(?!.*(.)\1)(?!.*(?:ab|bc|cd|de|ef|fg|gh|hi|ij|jk|kl|lm|mn|no|op|pq|qr|rs|st|tu|uv|vw|wx|xy|yz|AB|BC|CD|DE|EF|FG|GH|HI|IJ|JK|KL|LM|MN|NO|OP|PQ|QR|RS|ST|TU|UV|VW|WX|XY|YZ))(?=.{14,}$).*

[NM]

Hi @ruchika , do you get this as a response when trying to create an account?

[ruchika]

I get response as "Exception in create account query: Password verification for the specified password failed failed"

This is my createaccountjson in the connection:

{
"CreateAccountQry": "CALL SAVIYNT.USER_MGMT.CREATEUSER('${user.username}', '${randomPassword}', 'RQB')"
}

[rushikeshvartak]

Which connector used here ?

[rushikeshvartak]

{
"CreateAccountQry": "CALL SAVIYNT.USER_MGMT.CREATEUSER('${user.username}', '${password}', 'RQB')"
}

[NM]

@ruchika instead of random password try password.

[ruchika]

Received a limitation from Saviynt that regex above 255 characters is not allowed.

so tried using custom code in the creataccountjson as below but I am getting "error while parsing the account" error. Can someone please confirm if the syntax looks good or if any modifications has to be done.

{
"CreateAccountQry": "CALL SAVIYNT.user_mgmt.CreateUser('${user.username}','${com.mckesson.saviynt.GetPasswordRandom.PasswordGenerator.generatePassword()}', 'RDB')"
}

[rushikeshvartak]

{
  "CreateAccountQry": "CALL SAVIYNT.user_mgmt.CreateUser('${user.username}', '${com.mckesson.saviynt.GetPasswordRandom.PasswordGenerator.generatePassword()}', 'RDB')"
}