Skip to Content
avatar image
Former Member

SAP GRC - SAP IDM integration


may I ask you how SAP GRC Access Control can be integrated with Identity Management?

I would like a description of the model and to understand if CUP, ERM, RAR are all mandatory components to do the integration (it's not clear to me if only CUP should be use to integrate IDM).

Thank you to all


Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

1 Answer

  • Best Answer
    Jan 11, 2011 at 02:47 PM

    Hi Daniela,

    there are two basic options of integrating Netweaver Identity Management and SAP BusinessOBjects Access Control:

    - CUP can call IdM to provision roles to non-SAP systems through IdM

    - IdM can call CUP to hand over a request (or parts of it) for SoD and critical transaction checks

    As a third option, I have seen customers using both tools in parallel, provisioning users and master data through IdM and assigning SAP authorizations through CUP/RAR.

    The best kind of integration for your scenario is something that depends on your requirements and your desired processes. Technically you can do a lot, but it makes sense to invest the effort to find out what the best option is in your exact case.

    Kind regards,


    Add comment
    10|10000 characters needed characters exceeded