Appendix B. mySAP Enterprise Portal integration guide 311
should be static. Any password polices on the back-end server or application that
are dynamic in nature, such as periodic password updates, should be
deactivated.
There are cases when credential information on the back-end server can remain
active, particularly when the user is permitted to access the server or application
directly from within the corporate intranet. In this case, a user may change their
password on the back-end server while they are directly accessing it, causing the
password in the WebSEAL GSO resource credential to become out-of-sync. In
such a case, SSO through WebSEAL to the server would fail.
To address this problem, your organization should define a policy and ...