GRC 10.0 Connectors

Dear Experts,
I have two systems: SY1 (GRC 10.0 Main component), SY2 (Plug-in system)
I want to create connectors between SY1 and SY2.
RFCs are created as below:
Rfc connection between SY1 and SY2 (created this connection in GRC main system)
Rfc connection between SY2 and SY1 (created this connection in Plug-in system)
I have maintained this info in Maintain Connectors and Connection Types as below:
Target Connector : SY1_SY2
Source Connector: SY2_SY1
Logical Port: SY2_SY1
While running the sync jobs I am getting message connector SY1_SY2 is not located.
Please advise if I have created connectors correctly.
I appreciate your help.
Thanks,
Raj

Raj,
For general GRC use, you need to configure the RFC destinations for all systems within the GRC system, including the GRC system.
The Logical port should = Target Connector (not the source), i.e. SY1_SY2 in your example.
Check out the following document also http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/40535c03-9666-2e10-33a4-b6b003dac3cb

Similar Messages

  • GRC 10.0 Connector error

    Hi experts,
    I'am working on a GRC 10.0 (AC) implementation and when creating a conncetor to the SAP ERP, we have no error nor problem.
    But, when I try to run the SYNC programs, lets say GRAC_ROLEREP_PROFILE_SYNC, GRAC_PFCG_AUTHORIZATION_SYNC, etc. I get the following error: Processing for connector XXXXXXXX, Correctly define the logical connection in CCITS, Role sync failed with error. And when trying to run it in background a get the job cancelled and with the following error: Connector is not properly configured in common component setting.
    Yeah, I know what you are thinking...the problem is the connector!!! That's what I also think. But when I go to the IMG and look at the custominzing, cant find anything that makes me believe that the connector is not properly configured. At least following all the procedures in the configuration guide.
    I have upgraded up to Support package 4.
    Lets take a look at the customizing:
    In IMG/GRC/Common Component Settings/Integration Framwork/Create connectors
    I Have created an RFC ABAP connection (with the same logical name as the ERP), and tested the RFC connection and works fine.
    In IMG/GRC/Common Component Settings/Integration Framwork/Maintain connectors and connection types
    I have the connection types definitions by default. In Define connectors I have one entry with my target connector (the one created in the last step), connection type=SAP, Source connector=empty, Logical port=empty and max no of bg=3
    Could be the source connector and logical port fields?? Cause I dont know what to fill the fields with...
    Well hope somebody can give me a hand on this.
    Regards,

    Hi Experts,
    I'm using the SP5.
    I'am facing the same issue with the job GRAC_PFCG_AUTHORIZATION_SYNC.
    I tried to run it in background and foregroung in several langages but it doesn't solve my issue:
    Unable to locate connector xxxxxxx
    PFCG authorization sync failed with errors
    My connector's setting seems to be right as I can run a risk analysis and see results.
    Other synchronisation jobs (GRAC_REPOSITORY_OBJECT_SYNC for example) works fine.
    Have anyone an idea ?
    Best regards

  • GRC 10 - Legacy connector as user detail data source

    Hello, 
    I'm trying to use a legacy connector (with a text file as input) as a user data-source.
    Repository user sync for this legacy connector works : checked GRACUSER table, it is populated with all the user details from the input file (id,firstname,lastname,mail,department,phone
    I got it working for user search data source : when creating an access request for "other" user, searching for a user ID/name works : data are displayed in search result, however when I select the user from the serach result the user details are not populated in an access-request form.
    Any clue about this ? Any one already got this working ?
    GRC 10.0 SP13.
    Checked SP14 and SP15 release notes, and found no relevant notes yet.
    repository-related notes applied :
    -1864423
    -1950231
    Regards,
    Emmanuel.

    Hi Pedro,
    You only have confirmed that 2 accounts are maintained in HCM and in SU01 as well, so you would be able to see these accounts' details both ways.
    Yes, you are right about user account maintenance first in HCM at the time of new hire, then you can manually raise the access request to grant them access to various SAP systems. Or in order to automate this process as Prasahant suggested, you can take help from HR Triggers.
    You can refer: GRC 10.0 - HR Trigger configuration - Governance, Risk and Compliance - SCN Wiki
    But responding to your original discussion, whatever user accounts are maintained in HCM you would see those details provided you define HR for the "user search data source" AND from SU01 for "user detail data source"
    In your case you have 2 accounts which have been maintained in HCM as well as SU01, so that is what creating confusion for you.
    Let us know if you need any more clarifications.
    Regards,
    Ameet

  • Anyone have SAP GRC CUP LDAP connector using port 636 SSL working?

    Hello,
    I wanted to verify if anybody connects to an eDirectory (or any other) LDAP in CUP using SSL port 636?
    Statement I received from SAP is that this is not supported in CUP, and only non SSL connections to LDAP work. I just have trouble to believe this as SSL would be best practice in any company.

    Pados,
      By using STUNNEL, CUP will not know about SSL. CUP will always think it is a regular connection but stunnel will send SSL connection to LDAP. Here is the link:
    http://www.stunnel.org/
    Regards,
    Alpesh

  • How to delete backend system data from GRC,GRC 10 AC

    Hello experts,
    we have connected multiple ECC systems to GRC by creating connectors with respect to each system and
    currently we are using,now due to some reasons customer requested to delete complete data from
    one of the ECC system from GRC.
    we are using only access control with all components
    please  suggest how to delete all relevant data
    from GRC system
    Thanks
    GRC Admin

    Hi,
    You can use program GRAC_DELETE_ACCESS_RULES to achieve your requirement.
      2075597 - How to delete specific system from SPRO
    Regards,
    Madhu.

  • GRC 10 Upgrade: Unable to find a system while creating a request in AC

    Hi All,
    I am unable to find a system while creating a new request in Access Management. I have created a connector to the backend system  and I tested that by logging into the system remotely. However, the same system is not available for selection for which the request needs to be created.
    Please suggest.
    Regards,
    Faisal

    Hi Faisal,
    Please re-visit the following config:
    SPRO>GRC>AC-->Maintain Connector Settings
    SPRO>GRC>AC-->Maintain Mapping for Actions and Connector Groups
    SPRO>GRC>AC-->Maintain Plugin Settings (Make sure you have not checked the checkbox)
    Still not solved - please follow this document and make sure you have completed all the steps:
    http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/5067e447-5c64-2e10-7d9c-8f7e5953aadb
    Regards,
    Ajesh.

  • GRC AE User provisioning for Portal giving error

    Hi,
    We are having GRC AC 5.3- SP9.
    While doing user provisioning for Portal, we are getting the following error:  DBCacheVerifier.java@58:isExpired(). Detailed error log is attached herewith. The back end system (EP Dev) is installed with GRC RTA. Connectors are testing OK. The CPIC user id in backend system EPDev is ED1GRC and has SUPER ADMIN Authorizations, with SPML read/write actions attached to the Role. EP Dev system is having UME as data source, not LDAP. The issue was existing even before the SP9 upgrade. We have restarted the Server several times lately. Pls help me in this.
    Thanks & Regards,
    Jagadish H S
    BASIS Team, BPCL, Mumbai.

    Jagadish,
    This type of error would normally be a data setup issue. Have you imported all of the initial data files (XML ones)?
    Otherwise, if it is just a cache issue, then restarting the server would normally solve the proplem. I would also check the Java Netweaver Admin console to ensure that the memory settings are sufficiently configured to match the hardware that is deployed.
    Simon

  • SAP GRC 10 : Can we connect GRC to multiple clients within the same system

    We are having this requirement to connect SAP GRC to two different clients within the QA System.
    Just wondering whether this is possible to connect at the same time. We have created connectors in both the clients in ECC  and in GRC we have connectors for both ECC Cllients. When I try to add the connector for second client in SPRO , it is not even showing up entry for that
    Please confirm whether we can do this

    Hi Anil
    If you have two ECC clients you would create two connectors to GRC. You would need two SM59 RFC connections (one for each client) to map them through.You can map them to the same logical group though.
    What is not working for you? Did you define both clients as their own connectors?
    Regards
    Colleen

  • Reg_Access Request Submission Notification to GRAC_REQUESTER

    Hi All,
    I have an issues in SAP GRC 10.0 with respect to Notifications and variables, Currently in the Process SAP_GRAC_ACCESS_REQUEST, i have by default global notification settings which are mentioned below.
        Notification Event                              Template ID                                Recipient ID
    1. END_OF_REQUEST                         GRAC_AR_CLOSE                    GRAC_USER
    2. REQUEST_SUBMISSION                  GRAC_AR_SUBMIT                   GRAC_REQUESTER
    Now when i try to create a change access request which is by adding roles to the user in the connector system, the request gets submitted. So because of the Request Submission Notification event , a notification is sent to the requester and notification has the text which is mentioned in the document object associated to the message class<0AC_AR_SUBMIT>. Now i have created a custom Document object <Z_GRAC_AR_SUBMIT_BODY> and assigned that to the <0AC_AR_SUBMIT> by maintaining the table GRFNVNOTIFYMSG and also have changed the subject in that.
    But Now when the requester receives the notification, the subject is < Access Request Submission Notification > where as it is mentioned differently as shown below.
    Where as when the requester gets the submission notification as shown below, it looks different, i mean even the first name and last name too are not coming correctly.
    where as the user name maintained in the Requester's User master record is
    Could you please help why there are discrepencies and also how can i know where the sender is maintained, the mail id which sends the notifcations to the users.
    Thanks and Regards,
    Naga.

    Hi Filip,
    i have found out answer to one one part.
    Actually I have followed that document, and forgot to update one step, that is once i have created a custom document object thru SE61 and then we also need to assign it through SPRO-->GRC-->Access Control-->Maintain Custom Notification messages where we assign the custom document object to the message class and also we can update the sender there< from which user id's email id the notification mail should go to the requester) that is the reason why the mail is coming from GRCIDM rather than WF-BATCH...
    I have one more question , when ever requester is trying to raise a change request for assigning of roles to other user, when i click on the requester link as shown below, it is showing me details of the requester which in connector system.
    Note:Requester user id MARAMNA is present in both GRC system and connector system, where as it is showing me the details of connector system rather than GRC system.
    Thanks and Regards,
    Naga.

  • Add third physical system to logical system

    Hi ,
      We are using GRC AC 5.3 SP12 ( Back end ECC6 HR ) , we have connected our GRC DEV system to DEV 100 and DEV 200 clients , now i have connected QAS 100 client to the same system ( GRC DEV) , we have already created a logical system ERP( with Both DEV 100,DEV 200 ), now when i add QAS 100 to this logical system, I am not getting any risks/Violations for the newly attached system Could you please help me out , If i am missing something here.
    So far i have done following tasks
    1)     Created a JCO connector for QAS 100 in Webdynpro
    2)     Created a connector here in SAP RAR ( This is 3rd Connector , We are using SAP HR connectors )
    3)     Add new system(QAS 100) to logical system ERP
    4)     Generated Ruleset against Logical system
    5)     Full Sync for newly created system to GRC ( after this job, I can see uploaded Users,Roles)
    6)    Now its not showing any risk violation results in RAR
    Looking forward for your response
    Thanks & Regards
    Uma Shankar T
    SAP GRC Consultant

    Actual issues is , our basis team deleted some old Jco connectors  and give this new connector in back-end system when they created a new connector , But we could see 4 connectors from the GRC side configuration--> Connectors
    We have restarted the JAVA server and done the full sync again , Surprisingly problem got resolved now . Looks like a small issue but we got the solution after spending 2 to 3 days and tried different options finally restarting the JAVA server resolved our issue .
    Thanks & Regards
    Uma Shankar T
    SAP GRC Consultant

  • Error while creating new connector in GRC CUP 5.3

    Hi,
    I am  trying to create a new SAP Connector in CUP 5.3, when i fill in all the fields in the new connection and select  "Test Connection" it says Connection successful and when i save it and look at the Available connectors, i am unable to see my new connector there.
    Does anyone know why is this happening.
    a quick response is appriciated.
    Thanks.
    Edited by: Chaitanya Pallapotu on Jul 14, 2009 9:17 PM

    Hi Chetan,
    I have the same issue when configuring connectors in CUP. I solved it in this way:
    1- Go to RAR(Risk, Analysis and Remediation) --> Configuration --> Connector --> Search
    2- Select one of the connectors and write down the values in the list box of the field JCO Destination.
    3 - Now, go to CUP, and create the connector using the names writed down in step 2.
    CUP will warn you with an error, ignore it,  and then save the connector.
    Note: when creating the connector in CUP, fill the fields, then save/create(here you will have the error msg), then Test Connection, and then save again.
    That works for me!!!
    PD: Always log in to GRC with the same language configured in CUP.
    Hope this works for you!!!

  • GRC 10.0 - Transport Connector Relevant Settings

    Hi Gurus,
    Many of you have already completetd GRC 10.0 implementaion. One of the Key advantage of GRC 10.0 stated as "Changes can be transported".
    While carrying out configuration settings under nodes SPRO -->GRC --> Common Component Settings --> Integration Framework and other Subsequent nodes in Access Control, we find many steps involve Connector, Connector Mappings, Actions related Settings which are connector dependent.
    Further, there are relevant sub-nodes viz. User Defaults, User data sources, HR Triggers etc., which involve connector values as part of configuration steps.
    We have created Back end test / Development related connectors and carried out the relevant configuration settings. We find that all these settings are getting collected in the transport request.
    Once we move this transport request to GRC QAS / Production landscape all the back-end Test / Development /QAS related connector settings will also move. Further this will also call for defining back-end Production systems related Connector Settings in GRC Development System itself.
    Looking forward for inputs with respect best practices for managing the GRC 10.0 config / workflow related transports across Dev / QAS / landscape.
    Regards
    Hemant

    Hi Hemant
    SAP has made a lot of the transport functionality in GRC10. I find that they hereby created a huge expectation with the customer, that in fact is not true.
    For instance Exclusion Objects and Mitigation Controls are NOT transported. What about Organizations? Critical Roles and Profiles are also not transportable.
    As for the Connectors - system specific parameters are transported. Therefore you end up having to delete the DEV and QA connectors in the PRD GRC system.
    On this question, has anyone used CLM yet? It seems that only Functions and Risks will be extracted to CLM and then deployed in the other system (DEV to QA for example). Does CLM even work?
    SAP provide not guidance on all of these important issues. I agree that it is about time that SAP takes some leadership and produce a proper best practise guide for this software. By the way, an offical sizing document from SAP is still to be delivered.
    Thanks
    Will

  • GRC AC Connectors

    Hello Experts,
    Is the following process correct for creating connectors for GRC AC 5.3:
    1. JCO connector (Meta & Model) is created for a system say P6E and client 100
    2. Using this, a system connector P6E100 is created in RAR
    3. A JCO destination is created with this name i.e., P6E100
    4. Now the system connectors are created for all other three components CUP, SPM, ERM with same JCO destination.i.e., P6E100.
    Is this process correct?
    Thanks
    Ram

    Hi Ram,
    Yeah this is exactly what we've done and it works.
    Best regards.

  • GRC AC 5.3 EP Connector

    1. i'm trying to connect portal to my GRC AC server.
    i made the connector in RAR and i upload the masterdata from the portal. now i need to check it with CCDebugger and it doesnt seem to work.
    2. in order to create connector in CUP i need to enter URL  does any one know where i can find this information
    any ides?

    Hi,
    Please check the Post installation guide.
    https://wiki.sdn.sap.com/wiki/display/BPX/Governance%2CRisk%2CandCompliance%28GRC%29How-ToGuides
    1) for CC debugger URL
    http://<server>:<port>/webdynpro/dispatcher/sap.com/grc~ccappcomp/CCDebugger
    2) To Create Connector in CUP
    >>CUP>>Configuration>>Connectors>>Create
    Hope this wll help you.
    Regards
    Gangadhar
    Edited by: gangadhar hm on Aug 18, 2009 3:50 PM

  • SAP GRC 10 SP13 PC- AM scenario not available for assigning to connector

    Hello Expert,
    We are on GRC 10 SP 13 PC . We want to add connector to AM connector group under SPRO-GRC_Common Componenet Setting - Integration framework - Maintain Connector and Connector types - Define Connector groups.
    I remember all other groups ( AC related) which are available in this area are coming because of activation of BC sets. I have activated all the BC sets related to PC but AM group is not available.
    Any Suggestion?
    Kind Regards
    Asheesh

    Hello Asheesh,
    AM Integration scenario is available in next path in SPRO.
    SPRO -->GRC --> Common Component Setting - Integration framework -->Maintain Connection Settings
    Regards,
    Gowrinadh

Maybe you are looking for