SAP GRC 10.1 Integration with IDM

[former_member657020]

Team,

At our premises, SAP GRC and IDM integration is happening through below 2 Web services

1. services •GRAC_RISK_ANALYSIS_WOUT_NO_WS ,

2. GRC Detailed Risk Analysis web service - ZGRAC_DETAIL_RISK_ANALYSIS_IDM

At the first step the risk analysis is happening for a new Role requested by existing end user where the Risk ID is being populated.

My Question 1 : At the second stage , Once the Risk ID is populated the respective Mitigation Control ID is not being recognized by IDM. When i run Manually Risk Analysis , the Risk ID and respective Mitigation control ID both are being populated, but when the request is happening from IDM through Web services - Not sure if GRC is not able to provide the Mitigation control Data or IDM is reluctant to receive the information from GRC.

My question 2 : The Existing User has chosen the Role : Z:MM16* technical role for which SOD was triggered and Risk ID populated. But when i cross checked in the SAP ECC system, there were Two Profile Generator Active for the same role : Z:MM16*.

Is this might be the reason for the IDM not to pick up the respective Mitigation control ID. Will this create any impact.?Please find the screen shot attached.

Here at our Premises the request from IDM started , identifies Risk from GRC and with out Mitigation Control Assignment the new role is being provisioned to the user, which has become a challenge in Audit for Us.

Thank you for the assistance.

Regards