'Name or password is incorrect' error logging into SAP accounts created by the SAP AFX Connector in RSA Identity Governance & Lifecycle 

Example:

1. On the Create an Account tab of the SAP AFX connector, the SAP account to be created is configured with a default password.

 

2. The SAP account is created using the SAP AFX Test Connector Capabilities.

 

3. Note the account was successfully created.

 

4. The SAP user attempts to login to the new SAP account using the SAP account credentials (default password) specified by the SAP AFX connector. Despite using the correct password, the user gets the following error:

• RSA Identity Governance & Lifecycle 7.0.2 P05
• RSA Identity Governance & Lifecycle 7.1.0

The steps below can be used as a workaround for the SAP AFX Connector to generate the decrypted password during SAP account creation:

1. Export the SAP connector template and make a copy as a backup. To export,
   1. Navigate to AFX > Export. 
   2. Select SAP from the Connector Templates
2. Using the downloaded SAP Connector template zip, make the following changes:
   1. Unzip it. 
   2. Navigate to <directory with the unzipped folder>/SAP/TRANSPORT_TYPE
   3. Open the SAP-transport.xml file and locate the string <field name="BAPIPWD" sapDesc="New password">.
   4. Modify its value as follows:
      1. The original field value for BAPIPWD on SAP-transport.xml is:

<structure name="PASSWORD">
     <field name="BAPIPWD" sapDesc="New password">#[header:Password]</field>
</structure>

2. The new field value for BAPIPWD on SAP-transport.xml should be:

<structure name="PASSWORD">
     <field name="BAPIPWD" sapDesc="New password">#[groovy:com.aveksa.AFX.server.runtime.esb.core.AfxPropertyMgr.getInstance().getPropertyValue(message, 'Password')]</field>
</structure>

5. Zip the <UnzippedFolder> again.
6. Import it back into the system.  To import,
   1. Navigate to AFX > Import. 
   2. Choose the recently zipped file from your local folder.

3. Create a new SAP connector. To create,
   1. Navigate to AFX > Connectors > Create Connector
4. Execute the Create an Account command. To execute the command,
   1. Navigate to  AFX > Connectors.
   2. Choose the newly created SAP connector  > Capabilities tab > select Create an Account capability.
5. Test by logging into the new SAP account just created using the credentials supplied by the SAP AFX connector.