How to evaluate SAP related SODs defined in SOFY Suite(3rd party) from Saviynt as preventive check.

[AAR]

Hi,

We have a client requirement where SAP account provisioning should happen using the Saviynt's OOTB SAP connector, but the preventive/detective SODs check should be performed in SOFY suite (external tool where all the SAP related SODs defined at present)

Thanks in Advance.

Regards,

Anush

[rushikeshvartak]

You can connect as external risk connection to security system

[AAR]

Hi Rushi,

Thanks for your response.

Just want to know more details as the documentation seems available only for external risk evaluation against SAP GRC but in our case, we need to evaluate external risks against SOFY suite (exposed its sod risk evaluation as web service).

Is it feasible to evaluate risks through external REST API connection within Saviynt? 

It would be really helpful if there is any sample connection JSON or document link to achieve the above use case?

Regards,

Anush

[rushikeshvartak · Accepted solution]

There is no documentation around and you can use standard REST connector and try but my feeling REST connector will not work

[AAR]

Thanks Rushikesh,

It has been decided to use the SAP GRC connector for risk evaluation and all the SOD rules migrated from SOFY to SAP GRC here.

I have one more query that is it possible to implement the SOD Violation specific approvals at SAP GRC and access related approvals within Saviynt as we are planning to use the SAP base connector for access provisioning and SAP GRC connector for external risks evaluation(Preventative SOD checks)?

Thanks in Advance.

Regards,

Anush

[rushikeshvartak]

You can have specific approvals