Can I simply change the Password of IFSAPP

If you aren’t in cloud you can change it.

Hi @Noriro2 

As per my understanding, we have to check the below areas if you going to change the password of IFSAPP.

• Database Connections:
  The IFSAPP user is an important database user for IFS Applications. If you change the password, all systems that rely on this user to connect to the database will be affected. This includes:

  • Application servers
  • Background jobs
  • API integrations (like REST and SOAP)

• Configuration Files:
  After changing the password, you'll need to update the new password in all configuration files that use IFSAPP for database access. This includes settings for application servers, scheduled tasks, and any third-party systems that connect to IFS.

• Scheduled Jobs and Background Tasks:
  Any scheduled jobs or background tasks that use the IFSAPP user will stop working until they're updated with the new password.

• Middle-tier Services:
  Depending on your setup, middleware services (such as Oracle etc.) may need to be updated or restarted to apply the new password.

Yes, it's possible to change the IFSAPP password, but it needs to be done carefully to avoid any issues. The consultant’s time estimate probably includes all the necessary steps to ensure everything keeps running smoothly afterward. If you change the password without updating all the connected components and configurations, you have a risk of breaking system functionality.

I'm happy to share my advice on this. If you found the answer helpful, please mark it as the correct answer. This will allow us to close the thread and make it easier for other community users to find and benefit from in the future.

Regards,

Chanuka

Hi @JamesW72 ,

Thank for reply.

Do you think localizations may have impact on it? We don't have any External systems yet, but we will integrate e-invoicing in the future.

Hi @Link,

Thank you for reply, we don’t use cloud version of IFS but some of the users use Aurena, does it make any difference?

I wouldn’t have thought so .. But if you have any concerns, try updating the IFSAPP account in a non production environment - just for ‘extra belts and braces’ 

Non, what so ever..

Hi @Chanu_Yazi ,

Thank you for this long reply,

• Database Connections:
  The IFSAPP user is an important database user for IFS Applications. If you change the password, all systems that rely on this user to connect to the database will be affected. This includes:

  • Application servers
  • Background jobs
  • API integrations (like REST and SOAP) 

   

​​​@JamesW72  told that “When you update an IFS account, you are updating the underling Oracle account” so i don't think this will be an issue, we don't use any API integrations. 

• Configuration Files:
  After changing the password, you'll need to update the new password in all configuration files that use IFSAPP for database access. This includes settings for application servers, scheduled tasks, and any third-party systems that connect to IFS.

Which configurations files? i don’t have access to server. 

• Scheduled Jobs and Background Tasks:
  Any scheduled jobs or background tasks that use the IFSAPP user will stop working until they're updated with the new password.

I didn't know that background jobs ask for IFSAPP’s password, or will i just restart them? by default IFS has an enormous amount of background jobs.

• Middle-tier Services:
  Depending on your setup, middleware services (such as Oracle etc.) may need to be updated or restarted to apply the new password.

I am not the IT guy, so i don't know what servers or services there are but what i know is that we don't have any integrations so far (even LDAP integration temporarily suspended )

But in the aforementioned posts, people seem just changing the password.

@JamesW72 Thank you, i will try on TEST Env. to see any implications.

Hi @Noriro2 

it doesn’t matter. 

But I didn't mean the cloud version. Do you host on premise or in cloud?

Furthermore, do you use the IFSAPP user in any interfaces?

If so, you need to consider it.

Hi @Noriro2,

If you had any e-invoice portal system, there would be necessary to make some changes on e-invoice server(have info. for just Turkey), but in this case everything is as explained above that you need to check. Thanks for sharing with us(I did not know some of them) @Chanu_Yazi.

Just throwing my $0.02 worth in here: IFSAPP should be used for, and only use for, installation of the application, including delivery deployment etc. The middle tier and print agents etc. have their own users (IFSSYS, IFSCONNECT, IFSPRINT etc.), so IFSAPP should not be stored in any configuration files anywhere.

IFSAPP should not be used for integrations and the like. Of course, customers and us consultants find it convenient, so we often do anyway. But we shouldn’t.

On IFS Applications, change it (as JamesW72 pointed out, do it in a non-prod environment first) and keep it safe!

I’m not familiar with the installation process for IFS Cloud, so I’m not sure if it ends up in a yaml configuration file or similar somewhere.

Finally, IFS recommends that IFSAPP should be locked: https://docs.ifs.com/techdocs/23r2/030_administration/010_security/010_users/110_lock_appowner/

Hi @Link,

we host it on-premise, what interfaces you mean? 

Hi @uaksoy,

Thank you for reply.

we don’t use e-invoices yet, but we plan to use it in the future. (we use different application for this for now).

Hi @AussieAnders 

Thank you for reply.

what i understand so far since we don’t have any integration with other applications, i can change it.

And i will keep your suggestions in mind.

But another question arises here, since you suggest locking the IFSAPP user, what permissions ERP admins must have. We do admin (not IT level) jobs with IFSAPP user.

The out-of-the-box user IFSADMIN, as well as any user with the permission set FND_ADMIN, let’s you do most things in the Solution Manager.

I feel like I'm in Consultant Company's grasp, they told us that there are things they should do :/, does IFSADMIN have default password? because we don’t know it nor the IT guys.

Are there any tools like boomi or powershell scripts which use the IFSAPP user to transfer data from IFS to other applications?

@Link No as far as i know, i know that we don’t use Boomi, and no one in the company is experienced IFS User (even IT guys). i don’t think IT guys use PowerShell to transfer data because there is no such accumulated data yet.

Hi,

I changed the password in TEST Env. this morning, nothing happened so far, nothing seems broken, i will not use IFSAPP for a week to see whether we survive or not then i will do the same thing in PROD. Env.

Thanks.

Since we changed the IFSAPP password on TEST env. we didn’t face any problems, so we changed the password on PROD env couple of days ago, no problem so far. thanks all for helping.