Summary of the Webinar “SAP GRC Integration with Other Systems through Web Services”

On September 18, we held a webinar on “SAP GRC Integration with Other Systems through Web Services” presented by Jose Martín Pérez Del Prado, Senior Consultant and SAP Security and SAP GRC Specialist. It was hosted on the CUVIV platform with two one-hour sessions, a morning one for the European audience and an afternoon one for the LATAM audience.

It was a very interesting webinar, during which we conducted 3 polls to gather participants’ opinions on 3 key topics explained during the session.

Below are the contents covered during the webinar:

• The importance of integrations for achieving automation of IT processes.
• Main benefits of using web services: interoperability, improved efficiency, and increased productivity.
• Identification of systems suitable for integration in IT environments (ticketing tools, identity managers, and SAP GRC Access Controls) and a review of the 3 most common integration scenarios.
• Overview of the main functionalities offered by the SAP GRC standard related to the 16 web services, briefly explaining their relationship with each SAP GRC Access Controls module they interact with.
• Summary of the 8 most relevant risks categorized by the project stage in which they should be applied and derived from our experience in integration projects.
• Demonstration with practical examples at two levels:
  • Technical level: transactions used to configure and test the functionality of the services [SOAMANAGER/SE80]
  • Functional level: simulation of 3 integration scenarios using web services to understand their behavior and responses after execution:

• • • Case 1: ITSM (ticketing tool) + GRC AC

• • • • Opening requests
      • Exchanging request status

• • • Case 2: IdM (identity manager) + GRC AC

• • • • Retrieve the result of a risk analysis for SAP systems

• • • Case 3: ITSM + IdM + GRC AC

• • • • Retrieve roles associated with a job position
      • Opening requests (including roles by position)
      • Exchanging request status

If you are interested in obtaining the webinar recording, contact us at mk@inprosec.com.