3727198 - "Valid To" date discrepancy in Maintain Business Users application - S/4HANA Cloud Public Edition

• The "Valid To" date in the "Maintain Business Users" user creation section is automatically set to expire 1 year after the user's creation date instead of showing the default date of 31.12.9999 as seen in application "Manage Workforce".
• The discrepancy occurs when creating a new user in "Manage Workforce" and subsequently accessing the "Maintain Business Users" user creation section.

SAP S/4HANA Cloud Public Edition

1. Open the application "Manage Workforce".
2. Create a new user and note that the "Valid To" date is set to 31.12.9999.
3. Open "Maintain Business Users" application.
4. Click "Create".
5. Search for the user created in "Manage Workforce".
6. Observe that the "Valid To" date is automatically set to 1 year after the "Valid From" date.

The default 1-year expiration is based on security-by-design principles:

• Least Privilege – Limits the scope and duration of access rights, reducing the window of potential misuse.
• Defense in Depth – Implements time-based access controls and requires periodic re-validation of account necessity.
• Fail Securely – Accounts default to expiration rather than indefinite access, forcing explicit renewal decisions.
• Minimize Attack Surface – Reduces active, potentially compromised accounts and limits exposure from abandoned accounts.

Benefits

• Mitigates dormant accounts, credential compromise persistence, and privilege creep.
• Enforces periodic access reviews and re-authentication.
• Reduces long-term risk from accounts no longer needed.

Strengthens alignment with NIST and ISO 27001 security standards.

2761057 - Business Users Fail to Login to SAP S/4HANA Cloud Public Edition - SAP for Me

valid to, date, maintain business users, manage workforce, user, creation, default, security, valid from, expiration, security , KBA , BC-SRV-APS-IAM , Identity and Access Management , Bug Filed