Deprecated API

Contents

• Deprecated Interfaces
• Deprecated Classes
• Deprecated Fields
• Deprecated Methods

Deprecated Interfaces

com.sap.security.api.umap.system.ISystemLandscapeWrapper
Use ISystemLandscape instead.

This interface serves as wrapper for a system landscape to be plugged into UME. The ISystemLandscapeObject objects provided by an ISystemLandscapeWrapper will be used by the User Mapping functionality of UME (see IUserMapping as an entry point).

At runtime, all available implementations of this interface can be retrieved by calling UMFactory.getSystemLandscapeWrappers().
An implementation can register itself in UME via UMFactory.addSystemLandscapeWrapper(ISystemLandscapeWrapper).
Unregistering is possible using UMFactory.removeSystemLandscapeWrapper(ISystemLandscapeWrapper).

The concept knows two naming principles:

Unique keys (GUIDs)

• Each system must have exactly one unique key.
• Unique keys must be unique inside of a system landscape represented by an ISystemLandscapeWrapper implementation.
• Unique keys are unique in the sense that two systems are distinct if and only if their unique keys are distinct.

System aliases

• One system can have an arbitrary number of system aliases (please note that at least one alias is required to make the system available for user mapping).
• Systems can not be distinguished based on system aliases (because different aliases may belong to the same system).
• System aliases must be unique inside of a system landscape represented by an ISystemLandscapeWrapper implementation.

An application using user mapping will usually call only two methods of this interface:

• ISystemLandscapeWrapper.getSystemByAlias(String) to retrieve a system object that can be passed on to IUserMapping methods to retrieve user mapping data for that system, and perhaps
• ISystemLandscapeWrapper.getAllAliases() to be able to present a list of system aliases available.

Deprecated Classes

com.sap.security.api.logon.WebCallback
Must not be used any longer.

Deprecated Fields

com.sap.security.api.IGroupFactory.ANONYMOUS_USERS
use IGroupFactory.ANONYMOUS_USERS_UNIQUEID instead

com.sap.security.api.IGroupFactory.AUTHENTICATED_USERS
use IGroupFactory.AUTHENTICATED_USERS_UNIQUEID instead

com.sap.security.api.IPrincipalSearchFilter.CHECK_ACCESS

com.sap.security.api.IGroupFactory.EVERYONE
use IGroupFactory.EVERYONE_UNIQUEID instead

com.sap.security.api.IPrincipalSearchFilter.EXTENDED_SEARCH

com.sap.security.api.IPrincipalFactory.ICUSTOM_OBJECT

com.sap.security.api.umap.IUserMapping.UMAP_SYSTEM_FIELDS
This array of constants should not be used any more.

com.sap.security.api.umap.IUserMapping.UMAP_SYSTEM_TYPE_EP6_ALIAS
This constant is no longer valid and there's no replacement.

com.sap.security.api.umap.IUserMapping.UMAP_SYSTEMATTRS_R3NAMEREF

System attribute name to flag a backend system as SAP reference system for UME.

This logic is no longer supported. Instead, the SAP reference system is defined in UME configuration property "ume.r3.mastersystem" (see ILoginConstants.R3_MASTERSYSTEM).

Deprecated Methods

com.sap.security.api.UMFactory.addSystemLandscapeWrapper(ISystemLandscapeWrapper)
Use UMFactory.getSystemLandscapeFactory() and ISystemLandscapeFactory.registerLandscape(ISystemLandscape) instead.

com.sap.security.api.IUserMaint.addToGroup(String)
use IGroupFactory.addUserToGroup(String,String) instead

com.sap.security.api.IUserAccount.addToGroup(String)
use IUserMaint.addToGroup(String) instead

com.sap.security.api.IUserMaint.addToRole(String)
use IRoleFactory.addUserToRole(String, String) instead

com.sap.security.api.IUserAccount.addToRole(String)
use IUserMaint.addToRole(String) instead

com.sap.engine.interfaces.security.auth.AbstractLoginModule.changePasswordIfNeeded(String, CallbackHandler)
This functionality is moved to the login context.

com.sap.engine.interfaces.security.auth.AbstractLoginModule.changePasswordIfNeeded(UserContext, UserInfo, CallbackHandler)
This functionality is moved to the login context.

com.sap.engine.interfaces.security.auth.AbstractLoginModule.changePasswordIfNeeded(X509Certificate, CallbackHandler)
This functionality is moved to the login context.

com.sap.security.api.umap.IUserMapping.checkCryptoConfiguration(String)
Use IUserMapping.checkCryptoConfiguration(ISystemLandscapeObject) instead.

com.sap.engine.interfaces.security.auth.AbstractLoginModule.checkUserLockStatus(String)
This functionality is moved to the login context.

com.sap.engine.interfaces.security.auth.AbstractLoginModule.checkUserLockStatus(UserContext, UserInfo)
This functionality is moved to the login context.

com.sap.engine.interfaces.security.auth.AbstractLoginModule.checkUserLockStatus(X509Certificate)
This functionality is moved to the login context.

com.sap.security.api.acl.IAclManager.deletePrincipal(IPrincipal)
please use deletePrincipal(String principalID)

com.sap.security.api.ISecurityPolicy.getCertLogonRequired()

com.sap.security.api.ISecurityPolicy.getCookieLifeTime()

com.sap.security.api.UMFactory.getDefaultFactory()
: use UMFactory.getUserFactory() instead

com.sap.security.api.IPrincipalSearchFilter.getElementAt(int)
use IPrincipalSearchFilter.getSearchElementAt(int) instead

com.sap.security.core.server.vsi.api.Instance.getInfections()
Do not use

com.sap.security.api.umap.IUserMapping.getInverseMappingData(String, String, byte)
Use IUserMapping.getInverseMappingData(String, ISystemLandscapeObject) instead.

com.sap.security.core.server.destinations.api.DestinationService.getKeystoreViews()

com.sap.security.api.IUserAccount.getLastSuccessfulLogonDate()

com.sap.security.api.IUserAccount.getLockReason()
use IUserAccount.isPasswordLocked() and IUserAccount.isUserAccountLocked() instead

com.sap.security.api.IAuthentication.getLoggedInUser(HttpServletRequest, HttpServletResponse)
Use getLoggedInUser() instead.

com.sap.security.api.umap.IUserMapping.getMappedSystemsForPrincipal(IPrincipal)
Call IUserMapping.existsMappingData(ISystemLandscapeObject, IPrincipal) for every relevant system.

com.sap.security.api.IRoleFactory.getMaxRoleDescriptionLength()
the maximum length is defined in (String, String, String[])

com.sap.security.api.logon.IAuthScheme.getModules()
Use getAuthenticationTemplate instead to get the name of the authentication template which contains the login modules that are processed for logon.

com.sap.security.api.ISecurityPolicy.getPasswordChangeRequired()

com.sap.security.api.IUserAccount.getPreviousSuccessfulLogonDate()

com.sap.security.api.umap.IUserMapping.getR3UserName(IUser, String, Map, boolean)
Use IUserMapping.getR3UserName(IUser,ISystemLandscapeObject,boolean) instead.

com.sap.security.core.server.vsi.api.Instance.getScanErrors()
Do not use

com.sap.security.api.ticket.TicketVerifier.getSignerCertificate()
This method will be removed in the next release. Use TicketVerifier.getSignerCert() instead.

com.sap.security.api.IUserAccount.getSuccessfulLogonCounts()

com.sap.security.api.UMFactory.getSystemLandscapeWrappers()
Use UMFactory.getSystemLandscapeFactory() and ISystemLandscapeFactory.getAllLandscapes() resp. ISystemLandscapeFactory.getLandscape(String) instead.

com.sap.security.api.UMFactory.getTicketVerifier()
Please use the native library "SAPSSOEXT" and the corresponding Java wrapper. For further information, including where to download the "SAPSSOEXT" package, please refer to the online documentation.

com.sap.security.api.IUser.getUid()
new applications should use IPrincipal.getUniqueID().

com.sap.security.api.umap.IUserMapping.getUserMappingData(String, IPrincipal, Map)
Use IUserMapping.getUserMappingData(ISystemLandscapeObject,IPrincipal) instead.

com.sap.security.api.IUserAccount.incrementSuccessfulLogonCounts()

com.sap.security.api.logon.ILogonAuthentication.isAuthenticated(IUser)

com.sap.security.api.IUserAccount.isLocked()
use IUserAccount.isPasswordLocked() and IUserAccount.isUserAccountLocked() instead

com.sap.security.api.ISecurityPolicy.isPasswordValid(String)
please use isPasswordValid(String pass, String logonId)

com.sap.engine.interfaces.security.auth.AbstractLoginModule.isUserAccountExpired(String)
This functionality is moved to the login context.

com.sap.engine.interfaces.security.auth.AbstractLoginModule.isUserAccountExpired(UserInfo, UserContext)
This functionality is moved to the login context.

com.sap.security.api.IUserMaint.removeFromGroup(String)
use IGroupFactory.removeUserFromGroup(String, String) instead

com.sap.security.api.IUserAccount.removeFromGroup(String)
use IUserMaint.removeFromGroup(String) instead

com.sap.security.api.IUserMaint.removeFromRole(String)
use IRoleFactory.removeUserFromRole(String, String) instead

com.sap.security.api.IUserAccount.removeFromRole(String)
use IUserMaint.removeFromRole(String) instead

com.sap.security.api.UMFactory.removeSystemLandscapeWrapper(ISystemLandscapeWrapper)
Use UMFactory.getSystemLandscapeFactory() and ISystemLandscapeFactory.unregisterLandscape(ISystemLandscape) instead.

com.sap.security.core.server.vsi.api.Instance.setActiveContent(boolean)
this method has no effect

com.sap.security.api.ISecurityPolicy.setAutoUnlockTime(int)

com.sap.security.api.ISecurityPolicy.setCertLogonRequired(boolean)

com.sap.security.api.ISecurityPolicy.setCookieLifeTime(int)

com.sap.security.api.IUserAccount.setLastSuccessfulLogonDate(Date)

com.sap.security.api.ISecurityPolicy.setLockAfterInvalidAttempts(int)

com.sap.security.api.ISecurityPolicy.setLogonIdLowerCaseRequired(int)

com.sap.security.api.ISecurityPolicy.setLogonIdMaxLength(int)

com.sap.security.api.ISecurityPolicy.setLogonIdMinLength(int)

com.sap.security.api.ISecurityPolicy.setLogonIdNumericDigitsRequired(int)

com.sap.security.api.ISecurityPolicy.setLogonIdSpecialCharRequired(int)

com.sap.security.api.ISecurityPolicy.setOldInNewAllowed(boolean)

com.sap.security.api.ISecurityPolicy.setPasswordAlphaNumericRequired(int)

com.sap.security.api.ISecurityPolicy.setPasswordChangeAllowed(boolean)

com.sap.security.api.ISecurityPolicy.setPasswordChangeRequired(boolean)

com.sap.security.api.ISecurityPolicy.setPasswordExpiredDays(int)

com.sap.security.api.ISecurityPolicy.setPasswordHistory(int)

com.sap.security.api.ISecurityPolicy.setPasswordMaxIdleTime(int)

com.sap.security.api.ISecurityPolicy.setPasswordMaxLength(int)

com.sap.security.api.ISecurityPolicy.setPasswordMinLength(int)

com.sap.security.api.ISecurityPolicy.setPasswordMixCaseRequired(int)

com.sap.security.api.ISecurityPolicy.setPasswordPasswordLastChangeDateDefault(Date)

com.sap.security.api.ISecurityPolicy.setPasswordSpecialCharRequired(int)

com.sap.security.api.ISecurityPolicy.setPasswordSuccessfulCheckDateDefault(Date)

com.sap.security.api.IUserAccount.setSuccessfulLogonCounts(int)

com.sap.security.api.ISecurityPolicy.setUseridInPasswordAllowed(boolean)

com.sap.security.api.ISecurityPolicy.setUserName(String)

com.sap.security.api.umap.IUserMappingData.storeLogonData(Map)
Please use IUserMappingData.saveLogonData(Map) instead which supports more differentiated exception handling.

Store logon data for a specific user and backend system.

Please consider calling IUserMappingData.isReadOnly() before to make sure this user mapping entry can be (over)written.

com.sap.security.api.ISecurityPolicy.validatePassword(String)
please use validatePassword(String pass, String uid)

com.sap.engine.interfaces.security.auth.AbstractLoginModule.writeLogonStatistics(boolean, String, long, Map)
This functionality is moved to the login context.