LDAP to GRC- Group field mapping

[former_member227179]

Hello Experts,

We have recently changed out LDAP to GRC field mappings in GRC development system as mentioned in the attachment.

But we are not able to pull the manger field information in the portal which is maintained in active directory.

What could be the issue ?

Thanks in Advance.

Dinesh

[former_member385949 · Accepted solution]

Hi Dinesh,

Looks like there is no attachment. I would first run 'FIND' queries in tcode 'LDAP' to make sure SAP is being able to fetch the user details correctly and take it from there.

Regards,

Sajib.

[former_member227179 · Accepted solution]

Hello Sajib,

Thanks for your inputs.

I have checked all my LDAP settings & there was some issues with the system user.as well as Active directory settings.

We have corrected that & it works fine.

-Dinesh

[former_member385949 · Accepted solution]

Awewome! Please close the thread and reward points will be appreciated!

[Trinetra_Bhusha · Accepted solution]

Hi Sajib,

One Quick question related to LDAP and GRC field mapping.

I have made active directory as my End User Authentication and it is wokring fine but not able to pull filed values lik First Name,Last Name,Email ID.

I have attcahed document can you please tell me possibel reason for the same?

[former_member227179 · Accepted solution]

Hello Bhushan,

Have you mapped AC fields with the Active Directory fields ?

Attached screenshot with the mapping i have done & it works for me.

You have to maintain the same in Maintaining mapping for connectors & connector groups.

Let me know if you have issues.

Thanks,

Dinesh

[former_member385949 · Accepted solution]

Hi Trinetra,

I second what Dinesh has mentioned. Also, maintain the field mapping in tcode LDAPMAP.

Regards,

Sajib.

[Trinetra_Bhusha · Accepted solution]

Hi Dinesh,

Thanks for input let me try to configure as explained by you.

Hi Sajib,

I have already maintained the mapping in LDAPMAP:

This is not working.

Thanks,

Trinetra

[Trinetra_Bhusha · Accepted solution]

Hi Dinesh,

In the meanwhile I have tried the method suggested by you as well but still data is not being fetched:

[former_member385949 · Accepted solution]

Have you maintained the LDAP connector in the user details data source? Is LDAP your only user details data source? Please use the 'FIND' in tcode LDAP to verify GRC can fetch user details from LDAP.

Regards,

Sajib.

[Trinetra_Bhusha · Accepted solution]

yeah Done all that and the End user is working fine taking AD credential and also fetching user name so I guess no issues with Authentication and connectivity.The only part which is not fetching is user details like First Name/Last Name/Mail ID etc..

[former_member227179 · Accepted solution]

Hello Bhushan,

That means it would be the issue in mapping fields of system field names of First name & Last name with AC field names.

Have you mapped the it based on your Active directory settings?

Check it once & let me know for any issues.

Dinesh

[Trinetra_Bhusha · Accepted solution]

Hi Dinesh,

I guess its standrad settings for AD which is same in every scenario for the field name mapping which we need to use(In the above screen shot I have maintained what is actual in GRC system) and I am attaching what is presnet in active directory here Please let me know if that is not the case?

[former_member227179 · Accepted solution]

Hello Bhushan,

You need to check with AD team about the technical table names of Active directory , If you see in my case it was SN as technical name for field first name in Active directory & mapped accordingly .

Do the same in your case.It should work.

Thanks,

Dinesh

[Trinetra_Bhusha · Accepted solution]

Hi Dinesh/Sajib,

I hav etried every combination  and everything looks to be fine:

Attcahed are the screen shot of:

1. "FIND" in LDAP user attribute from AD

2. LDAPMAP.

3. GRC connector mapping.

4.END user Screen.

Still not able to fetch the data hope you guys can add your input to solve this

Thanks in Advance,

Trinetra

[former_member227179 · Accepted solution]

Hello Bhushan,

Please check the LDAP mappings which i maintained below.

Hope this helps.

Only difference i can see is last name field maintained as BAPI field.

Let me know for any issues.

[Trinetra_Bhusha · Accepted solution]

Changed the fields still not working I guess I need to riase SAP messgae thanks guys

[Trinetra_Bhusha · Accepted solution]

Hello Sajib/Dinesh,

Got the issue the user maintained in End User login was expired that was the reason teh data was getting pulled off.

Thansk for all the help

[Former Member · Accepted solution]

Sounds Good !

All the best for your implementation.

-Dinesh

[former_member385949 · Accepted solution]

Thanks for letting us know, Trinetra.