Compliance Calibrator 5.2 RTA for Non-SAP Apps

Hi all,
Can SoD rules be written for analyzing a Users access to SAP and NON-SAP applications across the enterprise?
If yes will CC RTA need to be installed on the NON-SAP application?
If yes are there any requirements that need to be met by NON-SAP application and is there a list of NON-SAP applications (other than-Peoplesoft, Oracle, Hyperion, JD Edwards) that CC has an RTA for?
Is there any documentation specific to aplications that can support CC RTAs and installation on these?
-Cheers

Hi,
Yes SoD rules can be written for analyzing user accesses to SAP and non-SAP applications.
Basically there is no other application for which an RTA exists, but there is a documentation discussing the technical requirements for file generation from the non-SAP systems for integration of non-SAP Systems with SAP Compliance Calibrator.
This documentation is available in <a href="http://service.sap.com/rkt-grc">http://service.sap.com/rkt-grc</a>
under SAP GRC Access Control 5.2 -> SAP GRC Compliance Calibrator 5.2 -> Step2: Prepare for your project -> Cross Application Material
You'll need your OSS user-id to access that page; in case you cannot access it, please post a message in the OSS.
Rgds,
Karim

Similar Messages

Service desk for non-sap (please - any inputs are welcome)

hi all,,
I know how to setup service desk for SAP use. Can some one provide me some tips on using solution manager - service desk for non-sap as well? eg: the company wants to use service desk for normal activities as well, as laptop not working, server down, other system issues etc.
The questions I have are -
1) Any specific structure to be created for the non-sap? The way we use in SAP specific environment is to use "SAP Components" while creating tickets. How can we create tickets for non-sap components? What will be the "responsibility" selection?
2) How about the Ibase? For SAP, the ibase already have the data from SMSY. How can I get data for non-sap systems? Anything is SAP to keep the Asset management data (like entries of laptops, servers etc)
Thanks for all the suggestions !!
JZKALH

Hi
You need to go for service desk XT which is the extension of service desk to manage non sap or IT incidents
Check below link
https://websmp110.sap-ag.de/_solutionmanager
Heterogeous system environments are a challenge for IT-service management in any company. The associated complex structures and varying forms of media often make it difficult to realize efficient service processes. With SAP Solution Manager Service Desk - Extended Usage (Service Desk XT), SAP offers a centralized support tool as a single point of access - for service requests and problem tickets related to SAP and non-SAP software.
The Single Point of Access for Support
SAP Solution Manager, which is a standard part of every SAP solution and therefore can be used by all SAP customers, supports users in SAP relevant service requests. The standard function of the service desk is restricted to service requests.
With Service Desk XT, SAP provides an extended support tool, which can be also used for general service requests, for example regarding IT or telecommunication equipment.
This priced add-on does not require additional interfaces to third-party products - the same service requests are used for SAP and non-SAP applications. This simplification is a benefit for your employees.
This solution has been created with IT service providers in mind, especially those which work within a company and currently do not have an IT-service desk application in place or would like to replace an existing system.
Also,
check this link
pg(46)
https://websmp205.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000147532009E
Pg 52 onwards
https://websmp205.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000059742008E
https://websmp205.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000548652007E
Hope it helps
Regards
Prakhar

"SSO" for non-sap web application using SAPGUI to browse?

I have a web application (non SAP) and the user base are also SAP users in an ABAP system.
To strengthen the authentication in the web app, I wanted to implement SSO
authentication as we pity the users for having to remember so many strong pw's and I
dont like LDAP based pw sync or other technology I dont understand, because then we are
just yet another application with the same pw...
We are having technical problems implementing SSO on the web app side, and are anyway a
bit sceptical about the user admin / role admin assignment if we get it to work.
So I have created a transaction in SAP which browses the web app and the intention is to
send the SAP sy-uname as the web app user. We can control this using s_tcode, and
an own auth object on the WAS side and a check on the session type before the connection is
established. In this sense we are dependent on the SAP concept implemented, but even so:
The role assignment is controlled in the web app itself -> so assume that I am not overly
worried about unauthorized access to the web application, as they would not have any
system role for it as their sy-uname does not exist. (Infact we can monitor this)
The browser on the front end is the SAPGUI with html controls on the SAP side.
I would be interested in knowing whether anyone else has experience with this approach, and
whether there are any areas to be carefull of?
I would also like to know whether this is a strategic error?
Kind regards,
Julius

Hi Julius,
well, if that web application would run on the same ABAP backend system then the solution described in <a href="http://service.sap.com/~iron/fm/011000358700000431401997E/0612670">SAP Note 612670</a> would be applicable:
a so-called "Re-entrance ticket" (based on the "SAP logon ticket" SSO proceedings) is issued, transported via the SAPGUI connection and back to the system via the invoked HTML control.
But for non-SAP web applications that does not help.
In that case only X.509 client certificates can be used for SSO. Actually, the web application could then also be invoked directly (independent from the SAPGUI session). The user is authenticated based on the X.509 client certificate - and not based on the ABAP userID (of the SAPGUI session).
Well, if you don't mind the effort you could also use the "SAP Logon Ticket evaluation library" (sapssoext, see <a href="http://service.sap.com/~iron/fm/011000358700000431401997E/0304450">SAP Note 304450</a>) to evalute the SAP logon ticket externally. You'll then need to have a "stub application" at the ABAP side that triggers the http redirect to your external web application. Not a nice solution but a possible one.
In the future SAML browser artifacts would be an option (preferable to integrate non-SAP applications). But currently that's not available (for NWAS ABAP).
Cheers, Wolfgang

SSO FOR NON SAP APPLICATIONS

SSO for non sap applications in EP on which siteminder sso is integrated
Posted: Aug 28, 2006 7:09 AM Reply E-mail this post
Hi ,
we have implemented Siteminder on SAP PORTAL 6 SP16 for authentication.I would like to integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder external authentication is implemented.
can anybody help for getting step by step document.
diff rewards to be given

Hi,
if you have access to service.sap.com via S-User, you can download "SAP Enterprise Portal Security Guide" in the portal section. It has dedicated descriptions about SSO-Settings, also about netegrity.
You can also search help.sap.com about "SSO" which gives you overview descriptions.
On SAP Service Net, there is also an pdf "Integrating Security functions" in the Netweaver 2004s Portal section, where the description of the Java API for the PDK is included. This is very helpfull for coding.

Solution Manager System Monitoring for non SAP system

Dear Support,
I have configured the CCMS Agent (SAPCCMSR) for non-SAP system (Windows 2008R2).
The system information (e.g. CPU, Memory, Disks etc) has already showed in RZ20 of Central Monitoring system (e.g. Solution Manager).
How can I do to configure to display these information in the Alert Inbox tab on System Monitoring Workcenter?
Best regards,
Fan Hung

Hi,
Have you defined and added corresponding logical systems for the respective satellite systems?
Here is the sequence of steps you've to do:
in SMSY:
1) Define server, DB, Systems
2) Generate READ, TMW, TRUSTED RFCs to the satellite systems
3) define logical systems and assign the satellite system to it
in Solution_Manager:
1) define new solution
2) add the logical system into the solution
If these steps are successful, you should be able to see the satellite system in SYSTEM MONITORING in Solution_Manager.
Have you already done these steps?
After performing these steps:
Solution_Manager>choose relevant solution>operations setup>Solution Monitoring>System monitoring>Activate monitoring> choose the system and activate monitoring.
Your system will then appear.
Does this help any way?

'Error Occured in the Source System' for Non SAP system

Hi Gurus,
We have an Info Package which is getting the data from the Source System 'DOCP' and it has failed due to 'Error Occured in the Source System'.Since the source system is Non SAP system there is no option 'Replicate Data Sources'.So,First I activated the transfer rules by the program and ran the package again .But again the same error occured.
Please suggest me how to proceed for this error for Non SAP Systems?

Hi,
Check the RFC connection in SM59 and reactivate the source system again.
Hope this helps..
Thank you,
S R.

Implementation strategy for non sap sources

hai friends,
could anyone help with the
'implementation strategy for non sap sources'.

Hi,
Its the same as with R3 sources.Only difference is you'll have different underlying interfaces. Non SAP systems can either be flat files, ETL systems or legacy systems using ETL connection, Oracle or Java systems XML, etc.
But your stategy would remain the same only per your non sap source system, the transactions and the ways you configure your datasources would differ.
Cheers,
Kedar

Web Server Filter Based SSO to Non-SAP Apps

Hi,
I am following SAP Note 442401 for configuring the Non-SAP App for Web Server Filter based SSO using SAP Logon Ticket. Also, I have downloaded the 5_0_2_8.zip file.
The Readme doc of this zip file says:
"<b>Changes in Web server filter plugins
The Web server filter plug ins and the Ticket Toolkit now were separated.
See subdirectories for further information:
"C" the Ticket Toolkit
"filter" the Web server filter plug ins
This is the last released version (5.0.2.8) on SAPSERV.
Pleaser refer for newer versions to SAP Service Marketplace (http://service.sap.com/patches)
Technology Components-> SAP SSOEXT -> SAP SSOEXT</b>"
Zip file has two folders named "C" and "filter".
"C" folder has cpp code to varify the ticket.
"Filter" folder has DLLs for the different web servers.
So far so good . Now, what I want to know is that is placing the DLL from the Filter folder onto the respective web server and doing some configs, as per the PDF provided with ZIP file, enough?
Or do I need to do anything else, like writing any class to read and validate the Ticket?
Thanks,
Vivek

See Web Server Filter Based SSO to Non-SAP Apps

Access Enforcer & non-SAP apps

We were told that you can use AE 5.2 for non-SAP applications. There are ways to set up roles for any type of system and accross systems. I do not see any of this information in the user guides that are provided and I have not been able to figure it out by playing around with the tools.
I saw some posts with regard to Role Expert so I will begin looking into this tool to see if it helps.
Is it possible to set this up to perform approvals/reol evaluations for some legacy applications?
Does anyone know of some web training or anything available for this?
Any links/pointers is appreciated.
Also, does the LDAP configuration actually work in AE? We wer able to set up NetWeaver to map to an ldap instance and then log into AE if we kept the authentication pointing ad SAP UME but when we set up LDAP using the same settings, set up the LDAP mappings and user defaults I cannot authenticate.
Regards,
-J

Hi John,
in response to the original question - you can use AE with non-SAP applications - basically anything that a Connector can be built to. This is specifically only for data retrieval (eg from LDAPs / Oracle/ Role Expert) - not for user account creation/ maintenance in the target systems (eg JDE / Bespoke systems etc). This doesn't stop you from defining workflows for non-SAP systems - just that you'll need a manual step at the end to execute the change.
Re the LDAP - connectors work fine for data retrieval (eg User details / User <> Mgr relationship) - which is totally separate from User Authentication for AE. If you are using CC & RE as well then you'll have to make a decision about whether to go with UME as primary point or LDAP (the UME User Persistence store is prob the easiest option long term - as UME roles would still need to be assigned for any user intending to use GRC..)
cheers
Paul

IDM & Non SAP app integration

Hi All,
I have to integrate one Non SAP application with IDM and conduct provision and de-provision. Can somebody provide me some design/approach how provisioning tasks can be configured to fulfill the same. The Non SAP app has oracle database where I have to provision user. Is there any OOB sample available or any existing thread which I can read?
Thanks,
Dhiman Paul.

Dhiman Paul wrote:
We are using a "To Database" pass.
In that, we have sql updating and we are using a stored procedure for insertion into non-sap application.
The stored procedure runs fine and we get a success entry log in IDM.
When we try to find the same user in non-sap app, it doesn't return any value.
For connection to non-sap and sap, we are having a communication user (not mxmc_rt).
We are using the same user for connection purpose between the app.
Does mxmc_rt require the privileges to write into the database table? As, we are not using the user for connection purpose.
Like Matt said if you run the procedure from SQL Developer or SQL+ does it work? If so what userid/password do you use? Use the same useid/password in the URL of your to Database-pass in IdM.
You don't need to use mxmc_rt for the connection to "3rd party" database, probably better if you get a dedicated user for the interface that has access only to the needed table / stored procedure etc.
regards, Tero

ISight not working for non-Apple apps under particular user account

I noticed that my iSight built into Macbook Pro 15" is not working anymore for non-Apple apps (Skype and Webex at least) and working for Facetime and Messages Beta under same account.
I tried to test it using different account on OS X with Skype and it is working great!
I'm using 10.7.3.
Any advice?

Hi,
I take it that in System Information the camera is listed under USB items ?
Your speps say OS x 10.7.2
Have you updated to OS X 10.7.3 ?
If you have I would start with that by doing a COMBO Version (Not using Software Update)
This will be everything that has been updated since OS X 107 came out and may catch those hard to trace issues.
Using the FInder > Go Menu > Hold the ALT key and Select the Library that appears > then navigate to Preferences.
In here find the Skype .plist.
Open it with Quick Look.
Can you capture that (Apple/CMD ( or ⌘) + Shift + 4 together (Also tap space bar at the end to get the Window) ) ? and post it here.
I don't use Skype and don't have the .plist to see if it lists the camera.
If it does it might pay to delete the.plist and force Skype to re-***** the hardware. (It also depends how much of your other settings are in there)
In the meantime if you go to the Skype Preferences can you see a Preview of the camera ?
Can you turn Off access to the camera and turn it On again in Skype ?
Skype does use Flash Player to do the Video.
Is Webex a browser led thing that uses Flash ?
If it looks like it is a Flash Issue do you have the GoogleTalk Video Plugin installed (there is a standalone and it is part of Chrome) ?
9:08 PM Saturday; February 18, 2012
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 iMac 2.5Ghz 5i 2011 (Lion 10.7.3)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Risk Management & Process controls for non SAP client

Hi Forum Gurus,
I need clarity on the following: Can Risk managment 3.0 and Process controls be implemented for a non-SAP client?
i.e. Our client does not run SAP, but they are interested in RM and PC, so is this possible to implement?
Any advice would be highly appreciated.
Kind regards,
PREVO.

Hi Prevo,
Process control and Risk management 3.0 are delivered within same installation package files so it is same for both the applications .
Also real time agents for Oracle or peoplesoft are avaialble if you want to leverage the automated control functionality of PC 3.0 in non SAP environment.
Remember the automated control functionality is the optional feature of PC3.0.If you wish only to use the manual controls features of PC 3.0 you dont need RTAs(real time agent).
You can find further information about manual controls at http://service.sap.com
use the quicklink '/rkt' then the following menu path: SAP Business Objects for GRC Solutions -> SAP BO Process Control 3.0 -> Technology Consultant
Regards
Debraj

SSO for non sap applications in EP on which siteminder sso is integrated

Hi ,
we have implemented Siteminder SSO on SAP PORTAL 6 SP16 for authentication.I would like integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder sso external authentication is implemented.
can anybody help for getting step by step document.
Thanks
Tag

Hi ,
we have implemented Siteminder SSO on SAP PORTAL 6 SP16 for authentication.I would like to integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder sso external authentication is implemented.
can anybody help for getting step by step document.
diff rewards to be given...
Thanks
Tag

Is it possible for non-sap systems to consume BDOCs without conversion?

Hi All,
I am new to CRM. I use SAP Jco API's to connect to SAP from my java application. Similarly now i want to connect to CRM.
Basically the required is to consume or send BDOC across Java application (non-sap system) and SAP CRM.
1. Is there a way to fetch the BDOC info from Jco API's and then consume them in Java application?
2. I read about XIF adapter in CRM, It says convert BDOC to IDOC.
Can you tell me if BDOC's can be sent out of SAP to non-sap systems as is without convert to IDOC or should it be always i have to convert to IDOC/XML to consume from non-sap systems ?
You quick reply is greatly apprciated.
Thanks,
Sowmya

Hi,
Yes. It is possible.
You can use the standard XML interface for Business Partner in the name space http://sap.com/XI/ABA.
Regards,
Masa

Technical/business system for non-SAP system

Hi,
I want to use a webservice from a non-SAP system.
It is necessary to define a technical and business system in zhe sld for that non-SAP system?
When yes, is this a standalone or a 3rd party system?
Thanx

I want to use a webservice from a non-SAP system.
It is necessary to define a technical and business system in zhe sld for that non-SAP system?
When yes, is this a standalone or a 3rd party system?
you dont need to create Business system in Sld for 3rd party just u need to create business component in id directly.
please refer SCN for how to create Bus.component.

Compliance Calibrator 5.2 RTA for Non-SAP Apps

Similar Messages

Maybe you are looking for