GRC AC 5.3 (SP14) RAR and webservices

Hi all,
in our company we have full GRC AC 5.3 suite SP14 (RAR, ERM, CUP, FF). Actually we have implemented only RAR and FF.
For all NON SAP applications, we have implemented a custom workflow (with Sharepoint) for users management.
Instead of use CUP, we would like to integrate RAR (for SOD Risk Analysis) our custom workflow through web services.
Is it a possible scenario ?
Is it mandatory to use CUP or we can call directly RAR ?
Many thanks in advance.
Andrea

Hi Andrea,
even though there is a risk analysis web service, it's not a public one and not supposed to be used (it's also not well documented...). There would also be the issue of making changes to the request as a result. You'll need to display risk analysis results in a way that's meaningful to the user, and allow for stuff like simulation or adding mitigations - risk analysis is most likely not just a yes/no decision.
This is why the public web services have been implented to CUP. You can call CUP from your Sharepoint app (granted, there'll be a diufferent UI), and then react to the risk analysis result. You'd be able to manage and document risks in requests and their mitigations there, and use your custom provisioning method.
Another alternative is to implement CUP for SAP (how do you manage users there now?) and implement the non-SAP systems there, too. You can then define your custom implemetation as an Identity Management system and hand over the request for provisioning.
There's a document here on BPX that describes GRC AC / IdM integration scenarios and has documentation of the web services.
Frank.

Similar Messages

  • GRC-AC 5.3 SP14: Any comments?

    Hi all,
    We are evaluating SP14. I was hoping there might be some experts out there that have already upgraded or are in the process of upgrading to SP14.
    Any minor or major issues? Any comments?
    Many thanks in advance.
    Best Regards,
    - John

    Our development GRC system is upgraded. Now we are testing ERM part. Found problem "Unhandled problem n/a". ABAPer is helping to resolve the problem with pre-implemention steps in note.
    What will be in CUP, RAR and FF I don't know yet
    Regards,
    Artem Ivashkin

  • RAR 5.3- Downloading ruleset from DEV RAR and uploading to PRD RAR

    Hi ,
    I am currently looking to implement RAR version 5.3 SP9. I will have a 2 tier landscape with a DEV and PRD GRC instance. We may not have the ruleset fully customised before we build PRD GRC. So after both RAR environments are built I may need to change the ruleset in DEV and then upload the changes to PRD. Is this possible in 5.3. Can I easily download the ruleset from DEV and import to PRD as many times as I want? Or do I need to delete the PRD ruleset each time and recreate it?
    Thanks,
    Gary

    Hi Gary,
    You should be able to export and import using the utilities functionality.
    You may find it easier to delete the PRD one and upload the new one as a clean ruleset to prevent from data corruption.
    Simon

  • Export and Deployment - Best Practices for RAR and CUP

    Hi Experts,
    I wanted to know what in your opinon is best practice for deployment for GRC for a 3 system landscape.
    We have a development landscape which connacts to all our environments - Dev-QA-Prod.
    Is it recommended to have just the production client connected to the prodiction boxes only and use Dev/ QA for other environments or is it a good idea to have Prod and QA in sync?
    In my opinion it looks like a good idea to have the same QA and PROD as it would make export easier.. Maybe I am worng..
    What according to you all is a good recommended practice here?
    Thanks,
    Chinmaya

    Hi Chinmaya,
    depends how many clusters you have in your landscape
    if it is something like 5 DEV box to connect 5 QAS boxes, so on
    then best practice will be to have separate DEV - QAS - PRD boxes for GRC  if money (h/w ) is no constraint for organization
    rather than later asking SAP for deletion scripts for deleting sandbox or dev connectors,
    best to have separate boxes for each
    also for future whenever you do rule changes in RAR and config changes in CUP, best to test in QAS first, as CUP will become very critical for your organization, post go-live
    and good part will be that management report will reflect true data for PRD only
    regards,
    Surpreet

  • Directory structure for servlets and webservices in one application

    hi,
    Can any one help me for creating servlets and webservices in one
    application and deploying in Jboss 4.2.0.
    I want to know exactly what is the directory structure for creating this
    application and what are the additional .xml files for deploying this application.
    if any one know this answere please tell the answere.

    I figured out a solution - it's a problem of policies. In detail: Server1's codebase entry (file:) refers to the class directory of Server1's project. In the simple case of only Client1, which has no codebase entry, it works fine without a file permission on the side of Server1. In the complex case of Client1+Server2, which has to have a codebase entry (file:) refering to the class directory of the Server2's project on a separate machine, for exactly the same method call from Client1 to Server1 a file permission entry on the side of Server1 is needed for Server1's class directory. But WHY ???
    It seems to be a little confusing with the codebase entries, many of the posts are contrary to others and to my personal experiences. Some comments given by Adrian Colley throw a little light upon some aspects. Is there anybody, who can explain the whole topic, when, why, and which part of RMI application deals with codebase entries, also in case of not dynamic code downloading ? May be there is also a reference into the java docs, which I didn't found up to now.
    Thanks in advance
    Axel

  • Making a call over HTTPS with LoadVars, XML.load(), and WebService - Yes or No?

    Hello, do LoadVars, XML.load(), or WebService support HTTPS-based endpoints, Yes or No?
    BACKGROUND
    ============
    I've been trying to get a LoadVars to actually make a call to an HTTPS endpoint. There is nothing in the documentation that says it can't. I know that there's also XML.load() and WebService class, but from the looks of it they don't do HTTPS.
    During my tests I have absolutely no issues with making calls to the same service over HTTP. When I change it to HTTPS I don't see HTTPStatus or even failures. Also, netstat on my server will show a connection being established with the endpoint when using HTTP but not when using HTTPS. I've also tried setting SSLVerifyCertificate to "false" in my Server.xml and after a restart of AMS it doesn't help, same symptom.
    I've also googled and looked through all Adobe forum posts that I can find:
    https://forums.adobe.com/message/4938426#4938426
    https://forums.adobe.com/thread/1661461
    https://forums.adobe.com/thread/782037
    https://forums.adobe.com/message/74981
    https://forums.adobe.com/message/5107735#5107735
    https://forums.adobe.com/message/7815#7815
    https://forums.adobe.com/message/53870#53870
    https://forums.adobe.com/message/87797#87797
    WebService Class - http://stackoverflow.com/questions/5619776/webservice-and-fms
    The best I found from the posts above is a non-commital answer from adobe staff at https://forums.adobe.com/message/4938426#4938426 and a 3rd party person saying that Webservice doesn't work at http://stackoverflow.com/questions/5619776/webservice-and-fms.
    All I need is an official supported/not-supported from the Adobe staff. Shouldn't be to hard after 5 years or so of ignoring the questions in the forum right?

    Adobe, please provide some details to your current and possibly potential customers, in at least one of the many unanswered posts about making HTTPS requests from AMS.
    P.S.
    realeyes_jun,
    RealEyes Media has been an inspiration to me for many years, and I would like to thank them for their efforts to better the media streaming community.
    Also, would it be possible to please release the source to REDbug?

  • BPM and Webservices

    I'm new in using of BPM and Webservices
    Netweaver version  is  CE 7.2 SPS03
    I use Web dynpro to write a ap to trigger web service for start BPM process.  
    It took about 40 sec for waiting response when i trigger the synchronous web service.
    And i get a exception  "DEFAULT_WS_METADATA_DEST. The server response timed out"
    But  i check my process status, it is running ok.
    When I tested for asynchronous web service ,I get quick response for it
    Does this version only support asynchronous web service?
    Do I need another configuration to use synchronous web service?

    Hi
    For process start you need a asynchronus web service (no output / response).
    Also, you can use a synchronus one if you are aware of this: If you use a synchron web service, you have to model a parallel split at the beginning of the process and finishing one of both tokens directly. This way, a response is generated when the first token hits the end event and the rest of the process is handled asynchronus.

  • BPM 11g: JAVA API and Webservice API

    Who knows BPM 11g: JAVA API and Webservice API?
    Customer want to call BPM 11g between Heterogeneous systems, such .net framework. One way is use webservice API, I think, but where can find it? thank you

    When you create a BPM application in 11g, you're actually creating a SOA composite application with a BPMN component in the composite. From within the BPMN editor, you can specify the interface (parameters) of each start node in the process. If you select a start node, look at the implementation tab, you'll see a properties group that lets you define the interface one property at a time, or by selecting an interface from the catalog.
    By defining these properties you're also defining the shape of the Web Service interface that will automatically be created in the composite. If you switch to the composite view, you'll see your BPMN process with a wire to it from a Web Service that's generated from the interface defined in the BPMN editor. The naming convention is the BPMN process name with ".service" appended. When you deploy the BPMN process, the web service will also be deployed, since it's also part of the composite. From Enterprise Manager (EM) you can test the service and get the WSDL, which could be used by other applications (e.g. .NET) to start and interact with a process instance.
    This is one of the advantages of the 11g architecture. The composite exposes services to consumers/clients. The implementation could have been BPEL, BPMN, a Mediator, Java/EJBs, or any combination working together. To the consumer, it's just a web service.
    In case your next question was about security ... you won't see properties about security in the BPMN editor. You use Web Service Manager to apply security or other constraints to the web service endpoint.

  • Keep RAR and ERM up to date with Z transactions

    Hi all,
    As you all know, Z transactions are added on the ongoing dayly basis to a SAP system.
    My question here:
    What is the best practice to keep RAR and ERM up to date in terms of this information?
    Many thanks in advance. Kind regards,
      Imanol

    Raghu,
    What I meant is the best practice to make such Z transactions available in RAR and ERM database to be available to define new functions and / or define new roles.
    Should periodic upload for action-permission file need to be executed in RAR?
    AND
    action, object job syncronized in ERM?
    Hope this clarifies my question.
    Thanks for all. Kind regards,
      Imanol

  • How to "divorce" linked file associations (e.g. .rar and .cbr)?

    Mac OS X links some file associations together as if the extensions were synonymous.  This is obviously desirable in some cases, e.g. .jpg and .jpeg. But it is equally obviously undesirable in others, e.g. .zip and .cbz, and .rar and .cbr; treating them the same just because the underlying compression algorithy is the same is absurd (by that reasoning, .jar would be considered synonymous with .zip!)  These obviously need to be opened in different apps, but the OS won't permit this (other than by drag-and-drop or "Open with...").
    I need a way to change what extensions the OS thinks are equivalent.  Any ideas?  I searched MacUpdate for "association" but didn't find anything relevant, so it looks like there's no app tailored to this purpose.

    Yes, of course.  If you change one, it changes the other.  I repeat, the OS itself is treating .rar and .cbr as synonymous, like .jpg and .jpeg.
    UPDATE: It seems that the OS does not do this with .cbz to the extent that it does with .cbr.  By default, it treats .cbz as if it were .zip, but if you use Get Info -> Change all on .cbz, you can in fact set it to a different app.  This is not the case with .cbr; if you change .cbr it changes .rar, and vice versa.  This stuff has to be in a plist somewhere.

  • GRC Access Controls v5.3 RAR Batch Job Risk Analysis Incr Analysis

    Hi All!
    re: GRC Access Controls v5.3 RAR Batch Job Risk Analysis Incr Analysis
    Can anyone list or direct me to a help link that has the progress list of processes that are contained in this batch job?
    Thanks!

    Hi All,
    I have answered my own question. The processes are:
    User Permission Analysis
    Profile Action Analysis
    Role Action Analysis
    User Action Analysis
    Role Permission Analysis
    -john

  • SLD conf for JDBC and webservice

    Hi,
    I am coonecting to source and target via webservice or JDBC.Do we need any configuration in SLD for systems.Driver and webservice has all details to connect to source and target system.Please confirm me if I am wrong.

    When you have complete tech details of the system, you can create a Business System for the same and import it into your ID.
    In short, a Business System represents a physical system.
    When you don't have complete info for the system, you can create a business service in your ID.It represnts an abstract service that makes connection to the source/target system.
    The choice depends on our own.

  • Unable to add XML and Webservices Datasource in Crystal Reports

    Hi,
        when I am trying to add a Web service datasource upon clicking the XML and Webservices Datasource in Database Manager I get the following error.
    Invalid Arguments Provided.
    Details: Java server startup failure. Verify PATH (JDK), CLASSPATH, and IORFileLocation properties in the CRConfig.xml file. In addition, verify that you are using JDK 1.5.
    I am using Windows server 2003 OS. Java is version 1.6. I tried the below things but none of them worked.
    1.Edit the crconfig.xml file to add classpath and license information
    2.reverted to java 1.5
    3.uninstalled and installed the CR 2008 software. None of these worked. Please help.

    Thanks Don but my issue is not proxy related.
                        I am not using a proxy though I am using a VPN to be in the network of the Webservice hosting server. Also, my problem is that I am not able to even enlarge the XML and Webservices Data source to add any xml or web service file let alone the one I want to.
    Edited by: iamkhader on May 10, 2010 7:26 AM

  • EAI and Webservices

    Which is the intersection point between EAI and Webservices?
    Regards.

    Hi Harmeet,
    I hope its because ODI is an E-LT and OWB is ETL tools. As i said in the previous post E-LT approach needs less servers and provides good speed.
    Thanks,
    Guru

  • Compare weblogic SM and webservice SM in OES

    Can you please tell me which one is the better one between the weblogic SM and webservices SM in OES.
    If you have any link which will explains the difference please let me know

    I presume you're talking about OES 11g. WebService SM has some limitations. I would advise to go with WebLogic SM and deploy webservice application in WebLogic Server and play with it.
    HTH.
    -Mahendra.

Maybe you are looking for