Question Re: Sailpoint as a datasource for GRC in Financial Management Q&A

Sailpoint as a datasource for GRC

SAPSupport — Wed, 03 May 2023 19:42:25 GMT

Hi Team,

We would like to know your recommendation whether the data source for the GRC application can be the Sailpoint.Please let us know if ther is any standard document for our reference.

Thanks

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

Re: Sailpoint as a datasource for GRC

SAPSupport — Wed, 03 May 2023 19:42:28 GMT

Sailpoint is a Not a tool that is specific to GRC. It can be integrated with GRC.

Organizations who have invested in SAP GRC can leverage its’ ability to perform SoD checks and risk management assessments and use the GRC integration module to take remediation action or mitigation decisions within SAP GRC. For example, when a user * access to an SAP role, IdentityIQ will query SAP GRC and determine if the request creates an SoD conflict.

SAP GRC uses the SAP GRC Access Risk * * and Access Request Management (ARM) web services to perform the risk evaluation process.

Your initial query asked if it can be used as a datasource. There is no such official information available over that with us.

You can check the following links for some more inputs.

https://www.sailpoint.com/integrations/sap/

https://docs.sailpoint.com/wp-content/uploads/SailPoint-Govern-and-Secure-Access-SAP-Systems.pdf

https://community.sailpoint.com/t5/Connector-Directory/SAP-GRC-Integration-Module/ta-p/153262

Re: Sailpoint as a datasource for GRC

Monsores — Fri, 05 May 2023 19:00:28 GMT

SAP GRC doesn't have a native connector for Sailpoint, but it has a rich API from which you can collect user details.

I don't have done the integration with Sailpoint yet, but the logic would be the same of other non-SAP systems I have onboarded to GRC. In this specific case to use it as a data source, basically you would need a bit of development to create a new implementation for CL_GRAC_AD_AUTH_MGMT class to consume user details from Sailpoint API.

Regards,

Marcelo Monsores