We have GRC Dev, Quality and Production with ECC Dev, Quality and Production systems and BW, GTS, Gateway systems are also there.
ECC Production system is containing CUA, where it is master system and others are child systems.
In GRC Dev, Quality and Production GRC PSS is configured as end user can login in GRC PSS link with their security question and answer and they can unlock their id or reset password in CUA Parent or in child systems where their id exists.
In GRC DEV Users Authentication Data sources Connectors of ECC Dev, Quality and production are added, similarly in GRC quality also. But in GRC production only ECC production connector is added in Users Authentication Data sources.
Recently our ECC systems are upgraded to EHP7 and because of it from ECC production CUA, ECC dev and quality systems were disconnected till UAT and after ECC production upgradation to EHP7, ECC Dev and Quality systems connected back with ECC Production CUA.
Now after this upgradation work now ECC production system users are not able to login in GRC PSS end user login link for their user id unlocking or password reset because through ECC production connector users provisioning is not working for login in GRC PSS link. Same issue is not getting with ECC Dev connector and ECC Quality connector. ECC Dev and ECC Quality system connector are working for users provisioning to login in GRC PSS link for users those exist in ECC Dev or in ECC Quality system.
But because all users exist in ECC production system and in GRC Production only ECC production connector is maintained in its Users Authentication Data sources, users are not able to login in GRC Production PSS link for their id unlocking or password reset, they are getting error message as “User XXXX does not exist in SAP system”.
ECC production system connector RFC is OK, RFC user id is system id with SAP_ALL and SAP_NEW access.
I am not able to find why ECC production system users provisioning is not happening by ECC production connector to login in GRC Production PSS link.
Till now I have tried 2 options to solve this problem.
- I have disconnected and reconnected GRC Production system from ECC Production system CUA, executed SCUG for GRC Production and executed Repository Object sync job in full synch mode in GRC production for its all connectors which include ECC production connector also.
- As per below SAP note, I have Maintain CUA setting in GRC Dev system by maintaining CUA parent connector in CUA Global system and marked it Active and maintained Parent to child systems in CUA Model distribution and after this setting executed Repository Object Sync job in full sync mode in GRC Dev for its all connectors which includes ECC Production connector also. But after this CUA setting also user provisioning is not working by ECC production connector for its users.
SAP note: 2072086 – CUA User Provisioning from GRC to CUA Parent/Child
As per your experience in GRC, can you please help to find why user provisioning is not working for login in GRC PSS link by ECC production connector for its users?
Right now, ECC Development, Quality, Production are upgraded to EHP. But this provisioning issue is getting with ECC Production connector only.