Integrate SAP Access Control 10.0 with the SAP Enterprise Portal

  • by Alpesh Parmar, Managing Partner, ultimumIT, Inc.
  • July 6, 2012
Learn how to configure SAP Access Control (AC) 10.0 to integrate with the SAP Enterprise Portal. See how to use the Access Request Management (ARM) capability of SAP Access Control 10.0 to provision users and assign roles to the SAP Enterprise Portal. The ARM capability helps users keep the same access request process for ABAP-based SAP systems, such as SAP ERP Central Component (ECC), SAP Solution Manager, and SAP SCM, as well as Java-based SAP systems such as the SAP Enterprise Portal.
Key Concept
Access Request Management (ARM) can connect to ABAP-based SAP systems such as SAP ERP Central Component (ECC), SAP SCM, SAP CRM, SAP Solution Manager, SAP BusinessObjects Business Intelligence (BI), or SAP Business Warehouse (SAP BW) to create users and assign roles with predelivered ABAP-based programs. Enabling the same functionality with a Java-based system such as the SAP Enterprise Portal requires a different procedure and separate configuration. To connect to Java-based systems, you use predelivered Web services installed on the SAP Enterprise Portal for integration.

In a typical scenario, the SAP Enterprise Portal works in conjunction with the SAP ERP Central Component (ECC) system. Users need the portal role and corresponding ECC role to perform certain activities in the SAP Enterprise Portal. If either the portal role or ECC role is missing, users cannot perform any activity in the SAP Enterprise Portal. Companies prefer to have a single unified solution that provisions access to ECC and the SAP Enterprise Portal. I cover the steps to set up SAP Access Control 10.0 so that it can provision users and assign roles in SAP Enterprise Portal.

I also cover integrating the Access Request Management (ARM) capability of SAP Access Control 10.0 with SAP Enterprise Portal. A step-by-step guide demonstrates the required configuration to integrate SAP Enterprise Portal with GRC 10.0.

Enabling the ARM capability to provision users or roles to an SAP Java system (e.g., the SAP Enterprise Portal) requires installation of a plug-in (predelivered Web services) on the target system. The name of this plug-in component is GRCPIEP (GRC Plug-in for Enterprise Portal).



Alpesh Parmar

Alpesh Parmar is the managing partner at ultimumIT, Inc. He has over 11 years of experience in the IT field and led many SAP implementations. He is an internationally recognized and a renowned subject matter expert for SAP GRC solutions and has been speaking at different SAP conferences. His articles have been published in SAP forums, SAPinsider, and the SAPexperts GRC hub. Before founding ultimumIT, Inc., he was at Levi Strauss & Co. for almost three years serving as GRC architect/advisor. Prior to joining Levi, he was a manager at PricewaterhouseCoopers and led multiple SAP GRC engagements. He also served as implementation team lead at SAP Labs and as senior software developer at Virsa Systems. Alpesh holds a bachelor’s degree in control engineering (B.E.I.C.) from Gujarat University, in India, and a master’s degree in computer science (M.S.C.S.) from Monmouth University, in New Jersey. 

See more by this author


No comments have been submitted on this article. 

Please log in to post a comment.

To learn more about subscription access to premium content, click here.