Workaround for non-SAP mitigating control reminders

Dear all,
Our business users would like to document mitigating controls in RAR 5.3 regardless of whether they are connected with an SAP report. They would also like to receive email reminders for those controls.
Unfortunately, the frequency of the control can only be defined per connected SAP report and reminders will only be sent for controls if the SAP report has not been executed.
Have you been exposed with a similar requirement? It seems like a natural thing to ask from a business perspective. RAR 5.3, however, is not designed in that way.
Have you come up with any feasible workarounds for this?
My current approach would be to create a dummy Z-report per SAP system (such as Z_MANUAL_MITCTRL) that control monitors have to call once to confirm the execution of their control.
Cheers and best regards
Patrick

Hello,
Regarding your question, in fact this is dependant on how your UME (User Management Engine) is configured on your WAS (Web Application Server). If the UME is connected to your R/3 back-end then the user need to have a R/3 account to connect to CC, otherwise if your UME is "independant" then you just need to create an account in the UME.
Regards,
Jérôme.

Similar Messages

"SSO" for non-sap web application using SAPGUI to browse?

I have a web application (non SAP) and the user base are also SAP users in an ABAP system.
To strengthen the authentication in the web app, I wanted to implement SSO
authentication as we pity the users for having to remember so many strong pw's and I
dont like LDAP based pw sync or other technology I dont understand, because then we are
just yet another application with the same pw...
We are having technical problems implementing SSO on the web app side, and are anyway a
bit sceptical about the user admin / role admin assignment if we get it to work.
So I have created a transaction in SAP which browses the web app and the intention is to
send the SAP sy-uname as the web app user. We can control this using s_tcode, and
an own auth object on the WAS side and a check on the session type before the connection is
established. In this sense we are dependent on the SAP concept implemented, but even so:
The role assignment is controlled in the web app itself -> so assume that I am not overly
worried about unauthorized access to the web application, as they would not have any
system role for it as their sy-uname does not exist. (Infact we can monitor this)
The browser on the front end is the SAPGUI with html controls on the SAP side.
I would be interested in knowing whether anyone else has experience with this approach, and
whether there are any areas to be carefull of?
I would also like to know whether this is a strategic error?
Kind regards,
Julius

Hi Julius,
well, if that web application would run on the same ABAP backend system then the solution described in <a href="http://service.sap.com/~iron/fm/011000358700000431401997E/0612670">SAP Note 612670</a> would be applicable:
a so-called "Re-entrance ticket" (based on the "SAP logon ticket" SSO proceedings) is issued, transported via the SAPGUI connection and back to the system via the invoked HTML control.
But for non-SAP web applications that does not help.
In that case only X.509 client certificates can be used for SSO. Actually, the web application could then also be invoked directly (independent from the SAPGUI session). The user is authenticated based on the X.509 client certificate - and not based on the ABAP userID (of the SAPGUI session).
Well, if you don't mind the effort you could also use the "SAP Logon Ticket evaluation library" (sapssoext, see <a href="http://service.sap.com/~iron/fm/011000358700000431401997E/0304450">SAP Note 304450</a>) to evalute the SAP logon ticket externally. You'll then need to have a "stub application" at the ABAP side that triggers the http redirect to your external web application. Not a nice solution but a possible one.
In the future SAML browser artifacts would be an option (preferable to integrate non-SAP applications). But currently that's not available (for NWAS ABAP).
Cheers, Wolfgang

Service desk for non-sap (please - any inputs are welcome)

hi all,,
I know how to setup service desk for SAP use. Can some one provide me some tips on using solution manager - service desk for non-sap as well? eg: the company wants to use service desk for normal activities as well, as laptop not working, server down, other system issues etc.
The questions I have are -
1) Any specific structure to be created for the non-sap? The way we use in SAP specific environment is to use "SAP Components" while creating tickets. How can we create tickets for non-sap components? What will be the "responsibility" selection?
2) How about the Ibase? For SAP, the ibase already have the data from SMSY. How can I get data for non-sap systems? Anything is SAP to keep the Asset management data (like entries of laptops, servers etc)
Thanks for all the suggestions !!
JZKALH

Hi
You need to go for service desk XT which is the extension of service desk to manage non sap or IT incidents
Check below link
https://websmp110.sap-ag.de/_solutionmanager
Heterogeous system environments are a challenge for IT-service management in any company. The associated complex structures and varying forms of media often make it difficult to realize efficient service processes. With SAP Solution Manager Service Desk - Extended Usage (Service Desk XT), SAP offers a centralized support tool as a single point of access - for service requests and problem tickets related to SAP and non-SAP software.
The Single Point of Access for Support
SAP Solution Manager, which is a standard part of every SAP solution and therefore can be used by all SAP customers, supports users in SAP relevant service requests. The standard function of the service desk is restricted to service requests.
With Service Desk XT, SAP provides an extended support tool, which can be also used for general service requests, for example regarding IT or telecommunication equipment.
This priced add-on does not require additional interfaces to third-party products - the same service requests are used for SAP and non-SAP applications. This simplification is a benefit for your employees.
This solution has been created with IT service providers in mind, especially those which work within a company and currently do not have an IT-service desk application in place or would like to replace an existing system.
Also,
check this link
pg(46)
https://websmp205.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000147532009E
Pg 52 onwards
https://websmp205.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000059742008E
https://websmp205.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_OBJECT=011000358700000548652007E
Hope it helps
Regards
Prakhar

SSO FOR NON SAP APPLICATIONS

SSO for non sap applications in EP on which siteminder sso is integrated
Posted: Aug 28, 2006 7:09 AM Reply E-mail this post
Hi ,
we have implemented Siteminder on SAP PORTAL 6 SP16 for authentication.I would like to integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder external authentication is implemented.
can anybody help for getting step by step document.
diff rewards to be given

Hi,
if you have access to service.sap.com via S-User, you can download "SAP Enterprise Portal Security Guide" in the portal section. It has dedicated descriptions about SSO-Settings, also about netegrity.
You can also search help.sap.com about "SSO" which gives you overview descriptions.
On SAP Service Net, there is also an pdf "Integrating Security functions" in the Netweaver 2004s Portal section, where the description of the Java API for the PDK is included. This is very helpfull for coding.

Solution Manager System Monitoring for non SAP system

Dear Support,
I have configured the CCMS Agent (SAPCCMSR) for non-SAP system (Windows 2008R2).
The system information (e.g. CPU, Memory, Disks etc) has already showed in RZ20 of Central Monitoring system (e.g. Solution Manager).
How can I do to configure to display these information in the Alert Inbox tab on System Monitoring Workcenter?
Best regards,
Fan Hung

Hi,
Have you defined and added corresponding logical systems for the respective satellite systems?
Here is the sequence of steps you've to do:
in SMSY:
1) Define server, DB, Systems
2) Generate READ, TMW, TRUSTED RFCs to the satellite systems
3) define logical systems and assign the satellite system to it
in Solution_Manager:
1) define new solution
2) add the logical system into the solution
If these steps are successful, you should be able to see the satellite system in SYSTEM MONITORING in Solution_Manager.
Have you already done these steps?
After performing these steps:
Solution_Manager>choose relevant solution>operations setup>Solution Monitoring>System monitoring>Activate monitoring> choose the system and activate monitoring.
Your system will then appear.
Does this help any way?

'Error Occured in the Source System' for Non SAP system

Hi Gurus,
We have an Info Package which is getting the data from the Source System 'DOCP' and it has failed due to 'Error Occured in the Source System'.Since the source system is Non SAP system there is no option 'Replicate Data Sources'.So,First I activated the transfer rules by the program and ran the package again .But again the same error occured.
Please suggest me how to proceed for this error for Non SAP Systems?

Hi,
Check the RFC connection in SM59 and reactivate the source system again.
Hope this helps..
Thank you,
S R.

Implementation strategy for non sap sources

hai friends,
could anyone help with the
'implementation strategy for non sap sources'.

Hi,
Its the same as with R3 sources.Only difference is you'll have different underlying interfaces. Non SAP systems can either be flat files, ETL systems or legacy systems using ETL connection, Oracle or Java systems XML, etc.
But your stategy would remain the same only per your non sap source system, the transactions and the ways you configure your datasources would differ.
Cheers,
Kedar

Risk Management & Process controls for non SAP client

Hi Forum Gurus,
I need clarity on the following: Can Risk managment 3.0 and Process controls be implemented for a non-SAP client?
i.e. Our client does not run SAP, but they are interested in RM and PC, so is this possible to implement?
Any advice would be highly appreciated.
Kind regards,
PREVO.

Hi Prevo,
Process control and Risk management 3.0 are delivered within same installation package files so it is same for both the applications .
Also real time agents for Oracle or peoplesoft are avaialble if you want to leverage the automated control functionality of PC 3.0 in non SAP environment.
Remember the automated control functionality is the optional feature of PC3.0.If you wish only to use the manual controls features of PC 3.0 you dont need RTAs(real time agent).
You can find further information about manual controls at http://service.sap.com
use the quicklink '/rkt' then the following menu path: SAP Business Objects for GRC Solutions -> SAP BO Process Control 3.0 -> Technology Consultant
Regards
Debraj

Compliance Calibrator 5.2 RTA for Non-SAP Apps

Hi all,
Can SoD rules be written for analyzing a Users access to SAP and NON-SAP applications across the enterprise?
If yes will CC RTA need to be installed on the NON-SAP application?
If yes are there any requirements that need to be met by NON-SAP application and is there a list of NON-SAP applications (other than-Peoplesoft, Oracle, Hyperion, JD Edwards) that CC has an RTA for?
Is there any documentation specific to aplications that can support CC RTAs and installation on these?
-Cheers

Hi,
Yes SoD rules can be written for analyzing user accesses to SAP and non-SAP applications.
Basically there is no other application for which an RTA exists, but there is a documentation discussing the technical requirements for file generation from the non-SAP systems for integration of non-SAP Systems with SAP Compliance Calibrator.
This documentation is available in <a href="http://service.sap.com/rkt-grc">http://service.sap.com/rkt-grc</a>
under SAP GRC Access Control 5.2 -> SAP GRC Compliance Calibrator 5.2 -> Step2: Prepare for your project -> Cross Application Material
You'll need your OSS user-id to access that page; in case you cannot access it, please post a message in the OSS.
Rgds,
Karim

SSO for non sap applications in EP on which siteminder sso is integrated

Hi ,
we have implemented Siteminder SSO on SAP PORTAL 6 SP16 for authentication.I would like integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder sso external authentication is implemented.
can anybody help for getting step by step document.
Thanks
Tag

Hi ,
we have implemented Siteminder SSO on SAP PORTAL 6 SP16 for authentication.I would like to integrate non sap application in Portal.I could not find any documentaion for setting up non sap application's in portal on which siteminder sso external authentication is implemented.
can anybody help for getting step by step document.
diff rewards to be given...
Thanks
Tag

Is it possible for non-sap systems to consume BDOCs without conversion?

Hi All,
I am new to CRM. I use SAP Jco API's to connect to SAP from my java application. Similarly now i want to connect to CRM.
Basically the required is to consume or send BDOC across Java application (non-sap system) and SAP CRM.
1. Is there a way to fetch the BDOC info from Jco API's and then consume them in Java application?
2. I read about XIF adapter in CRM, It says convert BDOC to IDOC.
Can you tell me if BDOC's can be sent out of SAP to non-sap systems as is without convert to IDOC or should it be always i have to convert to IDOC/XML to consume from non-sap systems ?
You quick reply is greatly apprciated.
Thanks,
Sowmya

Hi,
Yes. It is possible.
You can use the standard XML interface for Business Partner in the name space http://sap.com/XI/ABA.
Regards,
Masa

Technical/business system for non-SAP system

Hi,
I want to use a webservice from a non-SAP system.
It is necessary to define a technical and business system in zhe sld for that non-SAP system?
When yes, is this a standalone or a 3rd party system?
Thanx

I want to use a webservice from a non-SAP system.
It is necessary to define a technical and business system in zhe sld for that non-SAP system?
When yes, is this a standalone or a 3rd party system?
you dont need to create Business system in Sld for 3rd party just u need to create business component in id directly.
please refer SCN for how to create Bus.component.

Configuration needed for non-SAP system as Idoc sender

Hi,
We have a need to connect a non-SAP system which is sending an Idoc to XI. I understand that on the sender side, we need to create a tRFC port from the sender system with the server address of the Integration as the target host?
My question is on the PI side, are the configurations the same as a SAP system, i.e. maintaining the port in IDX1 and getting the metadata in IDX2 or will it be different?

In PI, you will need to create a port in IDX1 with the same port name as the Idoc control record when the Idoc comes from the non SAP system.
As you cannot load the Idoc metdata from your actual source, you will need to copy the Idoc metadata from a actual SAP system or from the port of another SAP system in IDX2
Also, in the Business Service / System, make sure that the logical system name is maintained as per the Idoc control record of the source.
Regards
Bhavesh

My kids have figured a workaround for the internet access control

I was quite happy with Network Magic until my kids rendered it fairly ineffective by a simple workaround. The internet access control seems to be tied into each PC's clock. So, my kids simply change the time on the computer and ... Voila! Internet access whenever the parents aren't around. I was kind of hoping the internet access schedule would be linked to the time on the router. I'm hoping this can be fixed.
Message Edited by molsoncdn on 12-13-2009 06:58 PM

Hi, set your kids user accounts to not be admins, and set the BIOS password, this will migate that workaround.
My Cisco Network Magic Configuration:
Router: D-Link WBR-2310 A1 FW:1.04, connected to Comcast High Speed Internet
Desktop, iMac: NM is on the Windows Partition, using Boot camp to access Windows, Windows 7 Pro 32-bit RTM, Broadcom Wireless N Card, McAfee Personal Firewall 2009,
Mac Partition of the iMac is using Mac OS X 10.6.1 Snow Leopard
Laptop: Windows XP Pro SP3, Intel PRO/Wireless 2200BG, McAfee Personal Firewall 2008
Please note that though I am a beta tester for Network Magic, I am not a employee of Linksys/Cisco and am volunteering my time here to help other NM users.

Inline Posture deployment for non Cisco Wireless Controler

Hi all of you
I have to deploy an Inline Posture to manage non Cisco Wireless Controler ( ZoneDirecteur 1000 Ruckus), It seem easy but I don't know from where to start. All documentation I rode it's about Inline Posture for VPN. I want just to use this Inline Posture to manage Wireless user through ZoneDirector wirelss controler. Thank you.
Regards
Kouassi

So what is the solution for this scenario?
remote site has non-cisco autonomous wireless AP. NAC is centralized. I can not use OOB since there is no support for non-cisco AP in OOB mode. As a result I use InBand mode. This means that local wireless trffic in remote site must travel to central site, go through NAC Server and go back to remote site. Is this correct?

Workaround for non-SAP mitigating control reminders

Similar Messages

Maybe you are looking for