An extranet application allows users outside your firewall limited, controlled access to certain functionality within the firewall. If this functionality involves SAP, and you want to assign users a generic password, how do you control access to extranet applications so that only selected business partners can use them? This article examines the password management capabilities offered by SAP, including the online SAPGUI transaction for maintaining extranet userids, the password BAPIs available for object types like Customer, Vendor, etc., and a component written in Java that encapsulates access to the password BAPIs.