3804245 - API Password Policy is not respected when authenticating via OpenID Connect (OIDC) - OData API

You have configured to use the OpenID Connect (OIDC) to authenticate the OData API call.

Under Password & Login Policy Settings > API Login Exception, you have also configured password policy for the API user (e.g. password does not expire).

However, you found the OpenID Connect (OIDC) does not follow your password policy.

SAP SuccessFactors HCM

• OData API

OpenID Connect (OIDC) requires the password of your SAP SuccessFactors user logging in through Identity Authentication.

The "Password & Login Policy Settings" configuration will apply to SF's own password. This password is also used for OData API Basic Authentication.

But OpenID Connect (OIDC) is using IAS password and not affected by above settings.

Accessing APIs Using OpenID Connect (OIDC) Through Identity Authentication

OIDC, OpenID Connect, IAS, Identity Authentication, OData API, PASSWORD_RESET_REQUIRED, API Login Exception, maximum password age, no expiry, unlimited, initial password, first login, integration user, password policy, SSO , KBA , LOD-SF-INT-ODATA , OData API Framework , Problem