Access Control - Legacy User Data Details Source

[former_member271290]

Hi all

we'd like to set a legacy connector as source for users details. we already done below configurations:

1. created legacy connectors and needed files

2. connected legacy connectors to AUTH and PROV (where we added FILE conn type with no class) integration scenarios

3. created related connector group and linked to action 4 (provisioning)

4. executed User sync - GRACUSER table correctly filled

5. set legacy connector as Search and Details data sources

During ARQ submission users are correctly shown in users search but when a user is selected details (first name, last name, email...) are not populated automatically.

Have you any idea on what could be the issue? is there any additional customization required?

Thank you in advance!

Samir

[former_member271290]

Hi Madhu

have you any update?

I can't round Access Management class for FILE connector, I guess this is the issue. Is there are solution?

[madhusap]

Hi Samir,

Issue is not due to provisioning class.

Do u have a file in the path "LEGACY_DEFAULT_USER" with the user details you are trying to fetch?

Regards,

Madhu

[former_member271290]

Yes, it is there. It is the same read by user sync job which have popolated GRACUSER tab.

[former_member271290]

Hi Madhu

yes, PFB the set up for AUTH:

maybe the issue could be related to PROV?

I can't found class than AUTH where I found CL_GRAC_AD_AUTH_MGMT_FILE

[madhusap]

Hi Sameer,

Do you have the corresponding file with user details in logical path mentioned for "LEGACY_DEFAULT_USER" under AUTH integration scenario.

GRC will try to directly retrieve the user details from the file mentioned and only for searching the user details it will use GRACUSER table.

Regards,

Madhu

[madhusap]

Hi Samir,

For integration scenario "AUTH" have you linked the corresponding class details or not? Can you check the following blog once where the details are clearly mentioned for legacy systems integration with GRC.

https://blogs.sap.com/2019/04/30/grc-10.010.112.0-grc-manual-provisioning-for-non-sap-systems/

Also the details first name , last name, email etc. are they available in GRACUSER?

Regards,

Madhu

[former_member271290]

Thanks Madhu for feedback.

Yes, I followed the steps mentioned in the blog. AUTH scenario is linked to AUTH FILE class, PROV I left blank.

In GRACUSER all user detials are available.