AE 5.2 remote risk analysis with CC 520_640

[Former Member]

Hi,

Can anyone please tell me if this scenario is possible.

AE to do risk analysis in remote system by using CC rules defined in a central system.

Eg. ECC system has mitigation rules defined for HR. ECC also has rules defined for Finance, MM etc

AE 5.2 will connect to the CC (ECC system) when processing a request and check the HR rules for the

roles in AE to do a remote risk analysis before provisioning the access in HR box.

ECC box has CC 520_640 - ECC 5.0

HR box has CC 520_700 - ECC 6.0

Is this possible at all? CC configuration parameters are enabled and defined to do a remote analysis.

Risk analysis shows risks when a remote analysis is done in CC. But AE risk analysis shows no risks.

Thanks

[hkaur · Accepted solution]

Hi,

Please make sure that the connector name in AE is the same as connector name in CC.

Also, what do you exactly mean when you say remote system: does that system not have entry in System Landscape directory?

[Former Member · Accepted solution]

Hello Harleen,

I want to ask is it mandatory to have same connector names in AE and CC?

As you said "make sure" , well I don't think this may be the cause for AE to not perform Risk Analysis.

However it is always good to have same connector names for better understanding and identification of systems in the landscape. But name's are not keys so there should be no impact technically but the System ID is supposed to be same.

Seeking some good explanation from Harleen.

[Former Member]

Hi Harleen and Amol

Thanks for your inputs. CC Java version is not installed and so AE can not be configured with URI details of CC. Since Java version is not available, only CC 4.0 has to be selected for Risk Analysis. This will work when doing risk analysis on ECC roles, but not on HR roles. HR is the remote system (ECC 6.0).

Regards

[Former Member]

Good question but quite confusing way to ask but anyways..

As you said you are able to perform risk analysis in RAR/CC on the considered system (remote system as you mentioned) but not able to perform the same in CUP/AE

from the symptoms It seems like the web service in AE for integration with CC to perform Risk Analysis is not configured.

Please go to Configuration tab > Risk Analysis menu > Select CC version

and enter the URL for the web service, it may be something like

hostaddres:portno/VirsaCCRiskAnalysisService/config?wsdl&style=document

or you can find it through following method.

Go to Web Services Navigator (same location as for UME) and drill down to VirsaCCRiskAnalysisService and get the URL from there. Finally enter the URL on the above mention location.

Then try performing the Risk Analysis on the considered system, if it is still not working and in case the web service is already configured and working for other systems let me know. We will think in some other direction.

Best Regards,

Amol Bharti