GRC Integration with CUA - Connector names

[myra_gill]

When using access control you are able to set up the connectors (RFC destinations) with names that do not match the logical system names. My question is that it appears that the only way to integrate with CUA is to have the connector names match the logical system names in CUA. Is this true? Are there any work arounds for not using the logical system as your RFC destination?

Since the distribution model in CUA is built automatically there is no way to connect the systems with any RFC except the one that matches the logical system. In other systems where you manually create the ports you seem to have more reliability.

[YTHO]

Hi Myra,

I've been working on similar use cases.

So far I don't experience issues when connector names are different from the CUA system. (though SAP recommends using consistent namings of RFC connectors).

Depending on your situation, you'll need to customize your GRC-AC system for the CUA accordingly. Please check note 2072086.

The customizing is checked when for instance also using the related webservices and underlying function modules. To debug; check:

* function module (tcode se37) GRAC_IDM_SELECT_APPL_SERVICES which is called by the webservice.

* callstack:

CALL METHOD cl_grac_idm_inbound_services=>selectapplications

CALL METHOD cl_grac_ad_util=>get_ac_connector

* In line 97 the results are incorrect due to mismatching table data from gracconnstat with lt_scenario_connectors.

* lt_scenario_connectors is populated by preceding coding lines 77 till 95. These connectors seem to be filtered by a certain CUA situation.

Would love to know if you got this configured the right way for your use cases.

Kind regards,