End User Login Page -- GRC 10

[former_member294400]

Hi Gurus,

End User Login Page –I want to know where I will get link of end-user login page where an end user will be logging in to raise the request.  The end user should be able to login using a password, and user would be any non-GRC user.

i tried to do it by following some forum but dint help much

Here I went to SPRO—>AC-User Provisioning --> activate End user logon and activated the service and tested the link it works fine from here, but the same link if I try to login from another browser it doesn’t work, so I want to know if i missed out any setting for end user login to work?and i have already activated end user verification under maintain data sources configuration as i want it to ask me user id and password. i even created a id named guestid in GRC system as communication user and assigned the user in this service, but its not working, and i want to know from where does it pull user details as when i gave the user id and password of ECC system which is data source  it says user doesnt exist.

kindly let me know if anybody who has already worked on this.

thank you

Regards

Maltesh J

[Colleen · Accepted solution]

Hi Maltesh

For the where to get the link - exactly what you did - right-click to "test" the service. This will open the browser with the URL.

Let's separate the two authentications:

1. The System User

• You need to create a SU01 Account for a system user. Just for now give it SAP_ALL or similiar so you can rule out any security issues with it (you will need to restrict permissions later as it is a service user)
• In SICF (or drill-into it via IMG for End User Login) you will need to maintain User Id and Password for that Service. There are a bunch of other End User Login services you will also need to maintain (each link once you login). Refer to SAP Note: Note 1628387 - UAM: End User Logon application requires re-logon for the list
• When the URL is launched - either you paste link in web browser OR you go to SICF and choose test service, the login screen appears because GRC authentication is against the System User - not your account

2.  End User Login Screen

• The fields for User Name and Password have to be an account that is linked in the Maintain Data Sources Configuration.
• This user could be an LDAP account, ERP, etc
• You might need to execute user synch (can't remember off top of my head) to make sure user is in GRACUSER* tables

All authorisation permissions are checked against the system user (hence put SAP_ALL on temporarily to confirm you have configuration in place). The end user login is designed so that the end user does not require a GRC SU01 account.

For your questions "i want to know from where does it pull user details as when i gave the user id and password of ECC system which is data source  it says user doesnt exist." Maybe check if this connector works and user sync - user for ECC is in the GRACUSER* tables?

For any other clarifications, screen shots of your errors would be helpful and what information did you following in the community already?

It sounds like you have done most of the configuration but made a small mistake. Go through your steps again and see if you can find it

[former_member294400 · Accepted solution]

Hello Colleen,

You have answered it all again, actually i missed to add user id i created in rest of the services and forgot to set user as internet user and this has worked for all the browsers and pulls the user as per the data source.

Thank you.

Regards

Maltesh

[Colleen · Accepted solution]

Great news - it can be easy to miss a step!