Integration IdM to GRC 10

[Former Member]

Hi Guys!

I am configuring the integration between SAP IdM 7.2 SP7 with the SAP GRC 10, but when i request a new role, i have the error in Submit AC Request:

begin:------------------------------------------------------------------------------------

putNextEntry failed storingcn=31174546832,ou=useraccessrequest,o=grc

Exception from Add operation:javax.naming.NamingException: [LDAP: error code 82 - (GRC User Access Request:82:Script execution failed)]; remaining name 'cn=31174546832,ou=useraccessrequest,o=grc'

end:-------------------------------------------------------------------------------------------

I don't know what is the motive error... I configured the Global Constant in GRC10 repository, but I think it is wrong...

Note: I look the SAP Note 1833773 but my GRC system this support package 12

someone help me, please?

Thanks and regards.

[keith_zhang]

Hello Eduardo,

Such error usually happens when some mandatory parameters are not sent/sent incorrectly by "Submit AC Request". Please verify this firstly.

If no problem found, then please you can generate higher level VDS operation log(log level=ALL), so that to investigate details why this happened during the web service call from VDS to GRC.

BR, Keith

[former_member205095]

Hi Keith

I'm getting the same error, on the VDS log shows me

"Invalid Provision Action ", when check the xml the value passed was 000,

Do you know where I set this?

or it might be filled automatically?

[former_member2987]

Are the GRC Webservices enabled?

[former_member205095]

Yes they are, I saw the kai blogs, and simulated on soap UI, and on the xml

gives the erros message "Invalid Provision Action"

<ProvAction

>000</ProvAction>, if I change the 000 to 006 (e.g) it creates a GRC request, however this is always filled with 000
any idea Matt?

[keith_zhang]

Hello arivind,

These action values are read by initial load job "AC 10.0 - Initial Load - Commons", pass:

Get Role Action Types From VDS

Create Role Action Variables

and stored in following global variables:

GRC_ROLE_ACTION_ASSIGN

GRC_ROLE_ACTION_REMOVE

GRC_ROLE_ACTION_RETAIN

Please check these variables value in your MMC, the value may be incorrect/missing there. If the variable value cannot be found correctly, the script from job "Submit AC Request" will use default value 000 as you saw.

BR, Keith