Can anyone please tell me if this scenario is possible.
AE to do risk analysis in remote system by using CC rules defined in a central system.
Eg. ECC system has mitigation rules defined for HR. ECC also has rules defined for Finance, MM etc
AE 5.2 will connect to the CC (ECC system) when processing a request and check the HR rules for the
roles in AE to do a remote risk analysis before provisioning the access in HR box.
ECC box has CC 520_640 - ECC 5.0
HR box has CC 520_700 - ECC 6.0
Is this possible at all? CC configuration parameters are enabled and defined to do a remote analysis.
Risk analysis shows risks when a remote analysis is done in CC. But AE risk analysis shows no risks.
Hi Harleen and Amol
Thanks for your inputs. CC Java version is not installed and so AE can not be configured with URI details of CC. Since Java version is not available, only CC 4.0 has to be selected for Risk Analysis. This will work when doing risk analysis on ECC roles, but not on HR roles. HR is the remote system (ECC 6.0).
Good question but quite confusing way to ask but anyways..
As you said you are able to perform risk analysis in RAR/CC on the considered system (remote system as you mentioned) but not able to perform the same in CUP/AE
from the symptoms It seems like the web service in AE for integration with CC to perform Risk Analysis is not configured.
Please go to Configuration tab > Risk Analysis menu > Select CC version
and enter the URL for the web service, it may be something like
or you can find it through following method.
Go to Web Services Navigator (same location as for UME) and drill down to VirsaCCRiskAnalysisService and get the URL from there. Finally enter the URL on the above mention location.
Then try performing the Risk Analysis on the considered system, if it is still not working and in case the web service is already configured and working for other systems let me know. We will think in some other direction.