End User Login for Fiori GRC Access Control apps

[Former Member]

We are currently having AD users login to the GRC system (AC) and request access etc using the EUL configuration (Webdynpro app).

We have enabled the Fiori app for the same use-case - can we carry over the same end user login over to Fiori? Currently it requires the user to login to FLP to run these apps but we want a EUL kind of scenario for the Fiori app as well. Any thoughts?

[Colleen]

EUL is a bit special compared to typical authentication in that a service user performs the authentication to the ABAP system (the end user doesn't need an SU01 account)

Fiori on the other hand requires the SU01 user master for authentication and authorisation. Your users will need to have a gateway SU01 account but you could investigate SSO with AD.

It may mean you need to automate or auto approve Fiori account with basic access to the catalogue/app to request access. Then the user can access FLP and use the request access app or whatever app you are using.

[steven_foo]

We are planning to have GRC 12 implementation. Our Fiori is using embedded strategy. Fiori and GRC are installed into our S4 HANA application server using HANA database. Which means both Front end and Back end server are inside same server of S4 HANA.

Access Request - are we to use EUL for those who have no account to raise access request? ==> Understand we can configure using EUL.

1) However if we are using Fiori for Access Request, any idea how could perform the same thing as EUL?

AC12_EndUserLogon.PDF (sap.com)

2) For Manager Approver, we have thousand of manager(s) and all these manager don't use SAP in day to day operation. They only need to logon for Access Approval. How could we configure it so that it is similar to EUL. Else we have to pay additional license for thousand of users, just for one task of Manager Approval.

Thanks.

[Former Member]

masayuki.sekihara Would you happen to have any information on this please?

Thanks

SVR