SAP GRC web services used for SoD checking?

[yoppie_ariesthio]

Hi Experts,

Do you know what is the standard web services for SoD checking? We use SAP GRC 10.1 currently.

We have plan to do SoD check inside Oracle Identity Manager 11.1, the workflow is in side Oracle.

I read latest documentation of Oracle IDM and to enable SoD checking with SAP GRC web service VirsaCCRiskAnalysisService . But i think it is an old version of SAP GRC 5.x.

Do you guys have any idea? Really appreciate your response.

Thanks

[alessandr0 · Accepted solution]

Dear Yoppie,

there are mainly two services that can be used. One with access request number and one without. The one without is GRAC_RISK_ANALYSIS_WOUT_NO_WS which might be the one for you.

Regards, Alessandro

[yoppie_ariesthio · Accepted solution]

Big Thanks Alessandro! We are able to test it.

But we found some issue, When we test it seems Report Format should be filled.

<MsgNo> 4 </MsgNo>
<MsgType> ERROR </MsgType>
<MsgStatement> Report Format should be  a numeric value .Either  1 , 2, 3, 4  .</MsgStatement>

But based on documentation it's an optional. Have you faced issue like this? Is there any config to make it optional to be filled?

Hope for your help once again.

Regards

Yoppie A.

[josiane_costa]

Hi Yoppie, Report Format is usually the same as you have setup in SPRO parameter 1023.

Governance, Risk and Compliance -> Access Control ->

Maintain Configuration Settings

I hope it helps.

Regards, Josiane