sap business objects process control 3.0 post installation guide for new installation

SAP COMMUNITY NETWORK SDN - sdnsapcom | BPX - bpxsapcom | BOC - bocsapcom

copy 2009 SAP AG

Applies to

SAP BusinessObjects Process Control 30

Summary

This documentation provides step-by-step procedure of PC 30 post installation for the following scenarios bull New installation of Process Control 30

Author(s) Jennifer Cha

Company Regional Implementation Group

Governance Risk and Compliance

SAP BusinessObjects Division

Created on Apri 25th 2009

Version 12

SAP BusinessObjects Process

Control 30 Post Installation

Guide for New Installation


copy 2009 SAP AG

Document History

Document Version Description

120 Split with Upgrade Post Inst Guide

110 Document Update

100 First official release of this guide


copy 2009 SAP AG

Typographic Conventions

Type Style Description

Example Text Words or characters quoted

from the screen These

include field names screen

titles pushbuttons labels

menu names menu paths

and menu options

Cross-references to other

documentation

Example text Emphasized words or

phrases in body text graphic

titles and table titles

Example text File and directory names and

their paths messages

names of variables and

parameters source text and

names of installation

upgrade and database tools

Example text User entry texts These are

words or characters that you

enter in the system exactly as

they appear in the

documentation

ltExample

textgt

Variable user entry Angle

brackets indicate that you

replace these words and

characters with appropriate

entries to make entries in the

system

EXAMPLE TEXT Keys on the keyboard for

example F2 or ENTER

Icons

Icon Description

Caution

Note or Important

Example

Recommendation or Tip


copy 2009 SAP AG

Table of Contents

1 Business Scenario 1

2 Background Information 1

3 Prerequisites1

4 Step-by-Step Procedure for New PC 30 Landscape Installation 2

41 Process Control 30 System Technical Consultant 2

411 Client Copy 2

412 Activating Applications in Clients 3

413 Check SAP ICF Service 4

414 Maintaining System Data 6

415 Activating the Process Control Business Configuration (BC) Sets6

42 Process Control 30 System Functional Consultant 6


422 Configure the IMG 9

423 Load Master Data 9

43 Portal Technical Consultant 9

431 Check Portal Packages 9

432 Creating a system Connection in Enterprise Portal 11

433 Portal Certificate to GRC PC System 15

434 Assigning Portal roles to PC users 17

44 Portal Functional Consultant 21

441 Verify GRC Process Control Portal Page Setup 21

45 BOE for Crystal Reports Technical Consultant 22

451 Check Prerequisites 22

452 Configuring the JCO Connection 22

453 Configuring the System Definition for BOE Server 28

454 Publishing Crystal Reports 34

455 Configuring Data Source Location of Crystal Reports 47

456 Setting up SSO 49

457 Setting up Security BOE 50

458 Setting up Scheduler 53

459 Configuration Changes for SAP 55

4510 Troubleshooting During BOE Installation and Configuration 56

46 BOE for Crystal Reports Functional Consultant 56

461 View Report from Report Center 56

47 RTA Technical Consultant 57

471 Check the RTA package has deployed 58

472 Setup Automated Testing and Monitoring 59


copy 2009 SAP AG

48 RTA Functional Consultantn 61

481 Test Connector 61

49 TREX Technical Consultant 62

491 Create TCPIP Connection 62

492 Create Table Entry for TREX Connector 63

410 TREX Functional Consultant 66

4101 Test the Search Functionality 66

5 Comments and Feedback 68

6 Appendix 69

7 Copyright 69

1 Business Scenario

SAP BusinessObjects Process Control uses a risk-based approach to managing controls associated

with business processes It enables members of audit and internal control teams to gain better

visibility into key business processes and to ensure a high level of reliability in financial statement

reporting

2 Background Information

This documentation provides step-by-step procedure of PC 30 post installation for the following

scenarios

New installation of Process Control 30

3 Prerequisites

All the pre-requisites are checked and fulfilled according to ldquoSAP BusinessObjects Process Control 30

Pre-installation Guiderdquo And SAP BusinessObjects Process Control 30 has been installed

successfully

4 Step-by-Step Procedure for New PC 30

Landscape Installation

After installing SAP BusinessObjects Process Control 30 post installation steps needs to be

performed by both technical consultant and functional consultant

41 Process Control 30 System Technical Consultant

The following tasks should be performed by technical consultants After you have downloaded and

installed the different files according to some of the previous sections follow the post-installation

sections in the order they are presented These steps enable the customization for the configuration of

the product

411 Client Copy

There are different scenarios for the client copy

Scenario 1 Deploy PC 30 on client 000 Then perform client copy using SAP_ALL profile for PC

client such as client 100

Scenario 2 PC client 100 has existed before deployment PC 30 packages Please perform the

following steps to copy over the needed data from client 000 to PC client 100

1 Log on to SAP BusinessObjects Process Control system via SAP Logon

2 Access transaction SCC1

3 Fill in the client copy details

Source Client 000

Transport Request SAPK-300AGINGRCFNDA

Note RequestTask for PC 30 and SP1

4 Perform the client copy for SP1 SP2 SP3 SP4 till the highest available SPs

5 Here is the example for SP1

Note If the test run is fine uncheck the ldquoTest Runrdquo and execute it

6 See httphelpsapcom and search for Client Copy

412 Activating Applications in Clients


2 Open the SAP Reference IMG Tools Customizing IMG Project Administration (Transaction

SPRO) Display the SAP Reference IMG and execute ldquoActivate Applications in Clientrdquo

3 To activate an application component choose the New Entries pushbutton

4 Select an application component from the dropdown list (Choose either GRC-PC or GRC-RM)

5 If you are using both Process Control and Risk Management you must set the indicator for both

components

413 Check SAP ICF Service

1 Access transaction SICF

2 Check the ICF nodes sappublicbc and sappublicbcur

3 You can also activate all ICF services within sappublic and sapbc

4 Activate all GRPC Service under sapbcwebdynprosap

414 Maintaining System Data

Please refer to Section 94 of SAP BusinessObjects Process Control 30 and Risk Management

30 Installation guide For more information see SAP Note1313108 - System Data Maintenance

for GRC Applications

415 Activating the Process Control Business Configuration

(BC) Sets

Please synchronize with functional consultant before activating the BC sets Details described in

section 421

42 Process Control 30 System Functional

Consultant

The following steps need to be performed by Functional Consultants


(BC) Sets


SPRO) Display the SAP Reference IMG

2 The following BC-Sets must be activated in order to access the PC 30 applications

GRPC-FREQUENCY

GRPC-TIMEFRAME

GRPC-MCF-SOX or GRPC-MCF-FDA (or both)

GRPC-BP-ATTR-VALUE

3 There are two of the BC Sets which need to be activated twice You can ignore the warning

messages during the first time activation

GRPC-ATTR-CTRL_OBJ_CATEGORY

GRPC-ATTR-CTRL_GROUP

4 All the BC-Sets under the node bdquoScoping‟ need to be activated by sequence of activities DON‟T

SKIP ANY ACTIVITY

5 You can only activate the BC Set if that client is not a production client in the system When you

activate the BC Set all data in the BC Set is transferred into the corresponding original tables

Any entries already in the original tables are overwritten in this process

6 Example for BC set activation

Click on

Select GRPC-MCF-FDA

Goto -gtActivation Transaction

Activate

422 Configure the IMG

Please follow the IMG configuration Guide for the IMG configuration

423 Load Master Data

SAP Functional Consultant may use the consulting tool MDUG (Master Data Upload Generator) to

load the master data for PC 30 and RM 30

43 Portal Technical Consultant

The following tasks are performed by Technical Consultants for Portal

Note Portal system has to be on the same domain of PC system

431 Check Portal Packages

1 Make sure that portal is accessible and portal business packages are deployed

Log on to Portal httpserverportindexhtml

Click on System Information

And click all components link

Check the portal packages have deployed

Note In this example the portal system ID is EP1

2 Log on Portal as Content Admin and check the portal content

3 Navigate to

After SP02 (including SP02)

o Content Administration -gt Portal Content -gt Browse -gt Portal Content -gt Content

Provided by SAP -gtGRC Process Control


Provided by SAP -gt GRC Reporting Framework

432 Creating a system Connection in Enterprise Portal

1 Log on Portal as System Admin

2 Navigation to System Administration -gt System Configuration -gt System Landscape

3 Create a system The following example uses ldquoSAP system using connection stringrdquo

4 The following Property Category has to be maintained

Connector

User Management

Web Application Server (Web AS)

Note Host Name has to include the port number

5 System Aliases bdquoSAP_GRCSPC‟ must be used as default

6 Permissions must be assigned properly to users (this screenshot is an example)

7 Perform Connection Tests after the certificate of portal has applied to PC system See section

433

433 Portal Certificate to GRC PC System


2 Navigation to System Administration -gt System Configuration -gt Keystore Administration

3 Download verifyder file


5 Access transaction strustsso2

6 Import the verifyder file

7 Add to Certificate List

8 Add to ACL

Note For Client put in 000 The System ID is the Portal System ID

9 Save

434 Assigning Portal roles to PC users

1 Log on Portal as User Admin

2 Navigation to User Administration -gt Identity Management

3 In order to see the bdquoGRC Process Control‟ navigation menu in portal the user must be assigned to

any one of the portal roles below And it is not recommended to use the Portal Role directly it will

be better to use user Group

GRC Process Control - All Role contains all worksets and is assigned to

Global Organization Owner

Global Regulation amp Policy Admin

Global Internal Auditor

GRC Process Control - Global Role contains My Home and Global Compliance Officebdquo

Global Organization Admin

Global Process amp Control Admin

Global Question amp Survey Admin

Global Test Plan Admin

Global CEOCFO

Global Automated Controls Customizing Admin

GRC Process Control - SOX Role contains My Home and SOX

All SOX roles (8)

GRC Process Control FDA Role contains My Home and FDA

All FDA roles (9)

GRC Process Control ndash Upgraded from PC25 Role contains My Home and Global

Compliance Officebdquo and bdquoSOX‟

PC 25 roles

4 Please see below for an example

5 Set Group as Search Criteria

6 Click on Create Group and fill in the Unique Name and Description

7 Click on Assigned Roles tab and search for GRC Process Control All role

8 Add and save

9 Search for a user

10 Click on Modify and click on Assigned Groups tab

11 Search for ldquoGRC Process Control Allrdquo group

12 Add

13 Save

44 Portal Functional Consultant

The following tasks are performed by Functional Consultants for Portal

441 Verify GRC Process Control Portal Page Setup

1 Log on Portal with ldquoGRC Process Control ndash Allrdquo role and make sure you can see My Home Global

Compliance Office Regulation ndash SOX Regulation ndash FDA tabs

45 BOE for Crystal Reports Technical Consultant

The following tasks are performed by Technical Consultants for BOE and Crystal Reports

Note BOE system has to be on the same domain of PC system

451 Check Prerequisites

Please refer to section 27 Prerequisites for BusinessObjects Enterprise BOE 31 Server

Installation of Process Control30_Pre-Installation Guide for the pre-requisite

452 Configuring the JCO Connection

1 Log on Portal as Content Admin

2 Navigation to Content Administration -gt Web Dynpro

3 Make sure the SLD Data Supplier Service in the J2EE Engine Administrator Console is properly

configured

4 Expand sapcom under Deployed Content and choose sapcomgrccrmodel The component

details screen shows on the right panel

5 Click on ldquoJCO Connections tab

The following system destinations are defined

Default logical system name for model instances GRFN_CR_DATA

Default logical system name for RFC metadata GRFN_CR_METADATA

6 Click on Create for GRCFN_CR_DATA and fill in the first screen

7 Enter the client number you are using for the PC backend

8 Use the suggested JCO Pool Configuration values as below

9 Select the appropriate J2EE Cluster

10 Note This shows a local J2EE but you may also use a different one

11 Choose Application Data on the left

12 Select the applicable Destination Type on the right

13 Select the Application Server from the drop-down or enter the values manually

Note This drop-down is only populated with data once you create a system landscape in SLD

14 Choose Ticket for User Authentication your language and Off for SNC

Note This uses SSO and requires a valid SSO setup between AS Java and AS ABAP

15 Test your connection using the Test link You should get a message telling you that the

connection is ok

16 Repeat the same steps for GRFN_CR_METADATA

17 Select a J2EE cluster

18 Select Dictionary Data Note Step 41 Appl Server Connection does not apply

19 Select the message server or create it manually

20 Enter a backend communication user for logon Note SSO not possible for meta-data

21 Test the connection

22 Test the JCO client connection by pressing the Test Connection pushbutton to verify the settings

453 Configuring the System Definition for BOE Server



3 Create a system

4 The following example uses ldquoSAP system using a dedicated application serverrdquo


Connector

Note SAP System ID is the PC system ID

SAP Client is the PC client number

User Management

Note Logon Method should use SAPLOGONTICKET Others will not work

Crystal Enterprise Server

Note Port number has to be included for the Crystal Enterprise Server

Path of Crystal Enterprise Server is ldquoOpenDocumentrdquo

System Aliases bdquoSAP_GRC_SPC_BOE‟ must be used

Permissions must be assigned properly to users (this screenshot is an example)

Perform Connection Test when SSO has applied

454 Publishing Crystal Reports

4541 Define PC System in BOE Central Management Console (CMC)

1 Logon to BOE CMC

2 Choose Authentication SAP

3 Double click on bdquoSAP‟ Choose bdquoNew‟ to define a new entitlement

system

4 Enter the logon credentials like system client app server system number user name and

password etc and save

5 Choose bdquoRole Import‟ Tab You should be able to see list of all PC Role Choose and import

the role as needed using the bdquoADD‟ button Choose bdquoUpdate‟ button to save your changes

6 Make sure in Options default system is target PC backend system

4542 Assigning Roles to Users

1 Create a user on PC system Assigned this user with the following roles

ldquoSAP_GRC_SPC_CRYSTAL_ROLErdquo ldquoSAP_GRC_FN_BUSINESS_USERrdquo and

ldquoSAP_GRC_FN_ALLrdquo And make sure this user has the GRFN_ADMINV activity 06 (cleanup

reports) authorization object assigned

2 This user should automatically synchronize to BOE system Please check documentation ldquocheck

xi3-1_bip_sap_install_enpdf for detailsrdquo for details In case you run into issues with connectivity

user all numbered password for this user Note Do not create new user in BOE

3 Create the same user ID on Portal system Assigned this user with ldquoCrystal Admin Rolerdquo portal

role

4 Crystal reports do not work with User Mapping Systems need to be setup to accept SSO ticket

4543 Activating Crystal Reports

1 Log on to PC system via SAPLOGON

2 Run transaction GRFN_ACTIVATE_CR (in package GRFN_REPORTING)

This has the enclosed program GRFN_CY_ACTIVATE_CR

3 Use SAPampGRFNPCCR variant to activate Process Control reports

4544 Create RFC for Publisher Service

Create an RFC Destination type bdquoT‟ for the BW Publisher Service

Administrator will provide the Program ID Gateway Host and Service name

Test and check if the connection is working

Note

How to find the Program ID of the BOE Server

From the BOE server bring up the Registry Editor Start -gt Run-gt regedit

Navigate via HKEY_LOCAL_MACHINE -gt SOFTWARE -gtBusiness Objects -gt Suite 120 -gt SAP -gt

BW Publisher Service On the right panel you will see the ProgId

4545 Create Server Definition for BOE in PC 30

1 Go to transaction CRYSTALRPTADMIN

2 Double-click Add new system

3 Type a descriptive name in the Alias field And fill in details in all the tabs RFC Destination HTTP Languages Roles (Add PC RM Crystal Role) Layout (Leave this to Default) See example screens below

4 Go to SAP System Settings -gt Set BW source parameters

5 Enter the App Server Logon Group and System Number details

4546 Publishing the Crystal Reports

1 Go to transaction CRYSTALRPTADMIN Expand Publish reports Folder

2 Double Click bdquoSelect reports and roles to publishldquo

3 Choose the system and click bdquoOKldquo to proceed This will display the role and reports available

to publish

4 Choose the appropriate role report and select bdquoPublish‟ button to start publishing

455 Configuring Data Source Location of Crystal Reports

After successful publishing of Crystal Reports you are required to configure these reports to point to

the correct PC system The reporting framework includes a Configuration Application to set the data

source location of Crystal reports

1 Log on to Portal with the user of ldquoCrystal Admin Rolerdquo portal role

2 Enter the information for BOE Server and DataSource

Field Description Example

BOE Server Info

BOE ReportFolder

Name

Name of the BOE Report which needs to be updated or else name of Folder in case all reports under the folder need to be updated

SAP_GRC_SPS_CRYST

AL_ROLE

Is Folder Check this in case you choose to give

Folder Name above

X

Is Wildcard Check this in case you are using

wildcards above

SAP_GRC_

BOE Server Name Fully qualified name of the Server where

BOE is installed

Serverdomain

BOE Admin User ID Admin user id X

BOE Admin User

Password

Admin user password X

Data Source Info

SAP Server Name Name of the target SAP server where

both or either PC is installed

Serverdomain

SAP Server

Connection String

Target SAP Server information

mentioned above where Crystal Reports

need to point Copy the string shown in

example and update with proper values

CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC

SAP User ID User ID which has proper authorizations

to target the SAP system mentioned

above For more information see the

SAP BusinessObjects Process Control

Security Guide

X

SAP User Password Password of the user mentioned above

in the target system

X

3 Trouble Shooting

Example

Hint for possible reason

Check folder permissions for that user user needs to be administrator on BOE and SAP user

needs to be configured as crystal admin in backend

456 Setting up SSO

Follow the SAP BusinessObjects Administration Guide to configure the BOE server to accept

SAPSSO2 tickets for single sign-on with the SAP back end In the BOE server webxml needs

to be updated as follows for the InfoviewApp application deployed on the web server

Webxml file under $InstallBusiness ObjectsTomcat55webappsInfoViewWEB-INF

Following properties must be set as shown here

457 Setting up Security BOE

Make sure all business users who will be running the reports have full access to the folder

where all Process Control reports reside on the BOE server after publishing from the SAP

system

To do this you can perform the following steps or you can follow the BOE administrator‟s guide

for more information All personalized reports reside in a folder called

SAPGRCPersonalizedReports in BOE

Perform the following steps to assign user security to folders

1 Log in to Central Management Console on the BOE server with an administrator account

2 Go to the Folders option

3 Create a new folder at root called SAPGRCPersonalizedReports (Required only for the initial

setup)

4 Right-click the folder you wish to assign permissions to and select User Security

5 At this point all Process Control business users need to be added to the access list as Full

Control of this folder

Assuming you have imported all GRC roles while setting up your Entitlement system in BOE

you can choose to use the SAP_GRC_FN_BASE and SAP_GRC_FN_ALL roles in this screen

and assign the roles Full Control of this folder Alternatively you can also have Everyone

assigned to be Full Control of this folder as only those users who can access reports can

personalize content from SAP Portal even though access is set for Everyone

458 Setting up Scheduler

All reports support standard scheduling feature supported by BOE

To enable the e-mail notification of scheduled reports follow these steps to configure BOE

1 Log in as administrator to CMCApp on BOE server and select Servers from the dropdown list

2 Right-click Crystal Reports Job Server and select Properties

3 Select Destinations Add Email

4 Enter all relevant values on this page

Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message

Deliver Documents as Attachments

5 Save and Close

6 Restart the Job Server to place changes in effect

459 Configuration Changes for SAP

1 Open webxml under APPSERVER_INSTALLwebappsSAPWEB-INF and uncomment the

following section

This context parameter specifies the DCP logic only for GRC‟s requirement

Enable the viewer‟s parameter prompt for opensql ods and info set report

corestylepromptenabled

true

2 Update the context parameter viewerhasrefresh value to false in the same webxml as mentioned

above

3 Check if APPSERVER_INSTALLwebappsSAPcrystalreportviewers folder has

ActiveXControls folder under it This is important for the Crystal Reports Print function to work In

case this folder doesn‟t exist you can copy this folder from

APPSERVER_INSTALLwebappsCrystalReportscrystalreportviewers

4510 Troubleshooting During BOE Installation and

Configuration

If the SAP GUI version on the BOE server is greater than 640 patch 9 then the Crystal

Administrator‟s password in the ABAP system must contain numbers only If the password

contains any letters error messages are generated

The same is true for the Crystal Administrator‟s account which is used to update the datasource

location of Crystal Reports using the provided Configuration Application

46 BOE for Crystal Reports Functional Consultant

The following tasks are performed by Functional Consultants for BOE and Crystal Reports

461 View Report from Report Center

1 Log on Portal with GRC Process Control ndash All Portal role

2 Navigation to GRC Process Control -gt SOX -gt Report Center

3 Click on any report link to view report

4 If you see exception contact the technical consultant

5 Otherwise you should be able to run the report successfully

47 RTA Technical Consultant

The following steps need to be performed by Technical Consultants

471 Check the RTA package has deployed

1 Log on to SAP RTA system such as ECC 60 via SAP Logon

2 Access System -gt Status

3 Click on the Component Information icon

4 Check the GRCPCRTA Release

472 Setup Automated Testing and Monitoring


2 Access IMG configuration via transaction SPRO

3 Navigate to GRC Process Control -gt Evaluation Setup -gt Assessment and Test -gt Automated

Testing and Monitoring

4721 Configure RFC Connectors

1 Setup RFC Connection to the RTA system

2 Note Make sure the Logon user is a dialog user and could remote logon to the system

4722 Maintain System Type

1 Make sure that SAP System type is maintained

4723 Register Connectors

1 Setup the connector to the RTA system

2 Target Connector is the RTA system

3 Source Connector is the SAP BusinessObjects PC system

Note the Target Connector is the ERP system The Source Connector is the PC system

48 RTA Functional Consultantn


481 Test Connector


2 Go to transaction GRPCRTA_PC and click on Set Connector

3 Drop down the selection and select the PC system

4 Click on Continue

5 Click on Green check

6 You are done with the verification of the connector setup

49 TREX Technical Consultant


491 Create TCPIP Connection


2 Access transaction SM59

3 Create a TCPIP connection to the TREX system

Note The system administrator needs to provide the Program ID information

492 Create Table Entry for TREX Connector

1 Access transaction SE11

2 Put in ESH_ADM_TREX for Database table

3 Click on Display

4 Go to Utilities -gt Table Contents -gt Create Entries

5 Put 100 for MANDT

ESH for ESH KEY

Note Key has to be ESH No other entry should be put in

6 Drop down and select TREX RFCDEST

TREX RFCDEST is the RFC created for TREX

7 Save the entry

8 If SE16 authorization is not given then go to transaction ESH_ADM_TREX_DEST

9 Choose TREX RFC

10 Execute by choosing

410 TREX Functional Consultant


4101 Test the Search Functionality

1 Log on Portal as GRC Business User

2 Navigation to GRC Process Control -gt My Home

3 Click on Search Documents link

4 The result will show

5 Comments and Feedback

Your feedback is very valuable and will enable us to improve our documents Please take a few

moments to complete our feedback form Any information you submit will be kept confidential

You can access the feedback form at

httpwwwsurveymonkeycomsaspxsm=stdoYUlaABrbKUBpE95Y9g_3d_3d

Both comments and feedback are very welcome Please send them to

Jennifer Cha RIG Process Control jenniferchasapcom

6 Appendix

Appendix A ndash Guides

The documentation for SAP BusinessObjects Process Control 30 is available to customers on the SAP Help Portal at httphelpsapcomBU and includes

Application Help (PlainHTML)

Master Guide Installation Guide Operations Guides Security Guides Upgrade Guides and Migration Guides in compliance with the SAP Documentation Standard You can also find this documentation on SAP Service Marketplace at httpservicesapcominstguides -gt SAP BusinessObjects -gt Process Control -gt Release 30

Release Notes You can also find this documentation on SAP Service Marketplace at httpservicesapcomreleasenotes -gt SAP BusinessObjects -gt SAP BusinessObjects governance risk compliance (GRC) -gt SAP BusinessObjects GRC Process Control -gt Release Notes SAP GRC Process Control 30

7 Copyright

copy 2009 SAP AG All rights reserved

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG The information contained herein may be changed without prior notice

Some software products marketed by SAP AG and its distributors contain proprietary software components of other software

vendors

Microsoft Windows Outlook and PowerPoint are registered trademarks of Microsoft Corporation

IBM DB2 DB2 Universal Database OS2 Parallel Sysplex MVSESA AIX S390 AS400 OS390 OS400 iSeries pSeries

xSeries zSeries System i System i5 System p System p5 System x System z System z9 zOS AFP Intelligent Miner WebSphere Netfinity Tivoli Informix i5OS POWER POWER5 POWER5+ OpenPower and PowerPC are trademarks or registered trademarks of IBM Corporation

Adobe the Adobe logo Acrobat PostScript and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States andor other countries

Oracle is a registered trademark of Oracle Corporation

UNIX XOpen OSF1 and Motif are registered trademarks of the Open Group

Citrix ICA Program Neighborhood MetaFrame WinFrame VideoFrame and MultiWin are trademarks or registered trademarks of Citrix Systems Inc

HTML XML XHTML and W3C are trademarks or registered trademarks of W3Creg World Wide Web Consortium Massachusetts Institute of Technology

Java is a registered trademark of Sun Microsystems Inc

JavaScript is a registered trademark of Sun Microsystems Inc used under license for technology invented and implemented by Netscape

MaxDB is a trademark of MySQL AB Sweden

SAP R3 mySAP mySAPcom xApps xApp SAP NetWeaver and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world All other product and service names mentioned are the trademarks of their respective companies Data contained in

this document serves informational purposes only National product specifications may vary

These materials are subject to change without notice These materials are provided by SAP AG and its affiliated companies

(SAP Group) for informational purposes only without representation or warranty of any kind and SAP Group shall not be liable for errors or omissions with respect to the materials The only warranties for SAP Group products and services are those that are set forth in the express warranty statements accompanying such products and services if any Nothing herein should

be construed as constituting an additional warranty

These materials are provided ldquoas isrdquo without a warranty of any kind either express or implied including but not limited to the implied warranties of merchantability fitness for a particular purpose or non-infringement

SAP shall not be liable for damages of any kind including without limitation direct special indirect or consequential damages that may result from the use of these materials

SAP does not warrant the accuracy or completeness of the information text graphics links or other items contained within

these materials SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third party web pages nor provide any warranty whatsoever relating to third party web pages

Any software coding andor code linesstrings (ldquoCoderdquo) included in this documentation are only examples and are not intended to be used in a productive system environment The Code is only intended better explain and visualize the syntax and phrasing rules of certain coding SAP does not warrant the correctness and completeness of the Code given herein and SAP shall not be

liable for errors or damages caused by the usage of the Code except if such damages were caused by SAP intentionally or grossly negligent

httpswwwsdnsapcomirjbpxgrc


copy 2009 SAP AG

Document History

Document Version Description

120 Split with Upgrade Post Inst Guide

110 Document Update

100 First official release of this guide


copy 2009 SAP AG








and menu options


documentation













they appear in the

documentation

ltExample

textgt






system


example F2 or ENTER

Icons

Icon Description

Caution

Note or Important

Example



copy 2009 SAP AG

Table of Contents



3 Prerequisites1



411 Client Copy 2

































copy 2009 SAP AG









6 Appendix 69

7 Copyright 69

1 Business Scenario




reporting



scenarios


3 Prerequisites



successfully









the product

411 Client Copy









Source Client 000














components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























copy 2009 SAP AG








and menu options


documentation













they appear in the

documentation

ltExample

textgt






system


example F2 or ENTER

Icons

Icon Description

Caution

Note or Important

Example



copy 2009 SAP AG

Table of Contents



3 Prerequisites1



411 Client Copy 2

































copy 2009 SAP AG









6 Appendix 69

7 Copyright 69

1 Business Scenario




reporting



scenarios


3 Prerequisites



successfully









the product

411 Client Copy









Source Client 000














components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























copy 2009 SAP AG

Table of Contents



3 Prerequisites1



411 Client Copy 2

































copy 2009 SAP AG









6 Appendix 69

7 Copyright 69

1 Business Scenario




reporting



scenarios


3 Prerequisites



successfully









the product

411 Client Copy









Source Client 000














components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























copy 2009 SAP AG









6 Appendix 69

7 Copyright 69

1 Business Scenario




reporting



scenarios


3 Prerequisites



successfully









the product

411 Client Copy









Source Client 000














components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























1 Business Scenario




reporting



scenarios


3 Prerequisites



successfully









the product

411 Client Copy









Source Client 000














components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
































the product

411 Client Copy









Source Client 000














components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors



































components











(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
































(BC) Sets


section 421


Consultant



(BC) Sets




GRPC-FREQUENCY

GRPC-TIMEFRAME


GRPC-BP-ATTR-VALUE






SKIP ANY ACTIVITY





Click on

Select GRPC-MCF-FDA


Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























Activate

















3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors








































3 Navigate to











Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors





























Connector

User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























User Management






433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors




























433









8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors





























8 Add to ACL


9 Save
















Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors






























Global CEOCFO



All SOX roles (8)


All FDA roles (9)



PC 25 roles





8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























8 Add and save

9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























9 Search for a user



12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























12 Add

13 Save
















configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors


































configured



















connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors








































connection is ok











3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

































3 Create a system



Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























Connector



User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























User Management










1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors





























1 Logon to BOE CMC



system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























system















role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors


































role











Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors




























Note















to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors


































to publish









BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
































BOE Server Info

BOE ReportFolder

Name


SAP_GRC_SPS_CRYST

AL_ROLE


Folder Name above

X


wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























wildcards above

SAP_GRC_


BOE is installed

Serverdomain


BOE Admin User

Password


Data Source Info



Serverdomain

SAP Server

Connection String





CLIENT=100 LANG=EN

R3NAME=GRC

MSHOST=servername

GROUP=PUBLIC





Security Guide

X



X

3 Trouble Shooting

Example




456 Setting up SSO









system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
































system








setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors


























setup)
















Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors






































Domain Name

Host

Port

Authentication

User Name

Password

From

To

CC

Subject

Message


5 Save and Close




following section




true


above






Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

























Configuration






































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
















































481 Test Connector




4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























4 Click on Continue













3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors




























3 Click on Display


5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























5 Put 100 for MANDT

ESH for ESH KEY




7 Save the entry


9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors
























9 Choose TREX RFC
















6 Appendix






7 Copyright




vendors

































6 Appendix






7 Copyright




vendors






















