IDN/ISC : SAP Direct - Entitlement Aggregation Failing

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Entitlement Aggregation is failing particularly after aggregating 4891 entitlements everytime. Permissions looks good. I’ve tried increasing TimeOut , tried “connector_skipLicenseData”: “true”, “connector_splitAuthObjectValues”: “true” but still the same.

Test Connection and Account Aggregation is working fine.
SAP Version 740 and using RFC Read Table as Function Module

Error:
Exception during aggregation of Object Type group on Application SAP [source]. Reason: java.lang.RuntimeException: An error occurred while aggregating Application SAP_2 [source] An internal error occurred handling stream response from the server.

1 Like
2

Hi @kuganesh ,
As you reading the data from RFC_READ_TABLE, It’s possible that SAP has limits on the amount of data that can be returned by an RFC call. Consider aggregating small chance of data by applying filters or pagination(assuming the connector you are using supports it)!

3

Hi Prashanth,

Thanks for responding but I’ve tried it already. We don’t have this option in UI but changed via API from “pageSize”:50000 to 5000 and even 1000 and still the same. I don’t think its the issue with TimeOut or Paging though.

4

Hi @kuganesh,
If you are not able to fetch the Entitlement from SAP system. Please ask SAP Team to fill the Go to the Aggregation setting >Role Type, Business Process and Sub process.
Please check.

image
image1223×352 13.7 KB

Thank you!

Please refer the below documents:

5

Hi @Abhishek_1995,

Thanks for responding, we are using SAP Direct connector and we don’t have an Aggregation Filters option in this OOTB connector. The one you are showing from SAP GRC.

6

Hi @kuganesh
Good day!

Kindly note that you are facing issue to fetch the roles from SAP system. As I can see only roles attribute is having group type.

image
image1909×762 57.7 KB

Please check below:

  1. Check ccg logs in VA by adding appropriate loggers in log4j2.properties file. After adding the loggers check ccg logs.
  2. Also please check with SAP team what kind of logs it is showing in SAP Server during entitlement aggregation.

Let me know the update on suggestions.
Thank you!

7

Hi Suraj,

Thanks for checking on this but Neither we nor SAP team cannot able to fetch proper errors on this. In VA, its showing the same error.

BR
Ganesh KS