SAP IDM 7.2 as a user data source in SAP GRC 10.1

[tim_lynen2]

Hi all,

We have our SAP IDM system up and running and it's also used as a central system / sourceof truth for SAP user master data.

Now we want to set up GRC ARM (Old CUP) but in the user data source & user data source details we're unable to set IDM as a data source.

It should be possible we believe since it makes sense IDM is containing user master data of good quality.

Any experience with this in here?

Thanks for sharing.

T

[Former Member]

Hello

check this document:  https://scn.sap.com/docs/DOC-17109

Thanks

[Chenyang]

Hi Tim,

SAP IdM has a component VDS (Virtual Directory Server) which exposes the user details as LDAP entries. You shall be able to connect GRC AC to a LDAP server.

Cheers

Chenyang

[tim_lynen2]

Hi,

Thanks but setting up the connection from SAP to VDS as an LDAP seems to fail.

Any idea if RFC type T and using a registered program on the gateway is the way to go here?

[Former Member]

Hello Tim,

You need to create RFC type (G)  - see the document pg 54

Thanks

[former_member190695]

Hi Tim,

Yes, this possible but it's a bit hard to explain in a few words.

Firstly, you need to follow the Identity Services Configuration Guide, see link.

Secondly,

1. Deploy the .ear file as described in the configuration guide.
2. Create an HTTP Connection (G) to your AS JAVA SPML service.
3. Maintain the connection settings and other GRC configuration in SPRO.
4. Import Schema, sync users and roles in SAP GRC AC.
5. Maintain Data Sources Configuration in SPRO to use SAP NW IDM as data source in ARM.

I hope you will find this information useful.

Best Regards,

Ridouan Taibi