Integration ISC with SAP GRC

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi All,

We are looking to achieve below use case in ISC with SAP GRC integration.

Access of SAP entitlement/roles should be raised from ISC –> SAP GRC to perform SOD check –> post GRC checks and approvals –> provisioning should be done via ISC to specific SAP target.

Please let me know what all pre-requisite is required both on ISC and SAP GRC side to achieve this use case, also guide me to any documentation which can help in achieving this use case.

Thanks in advance.

2

Hello @nitin_m_jain, I’ve been recently working in a Workday integration, indeed very similar to SAP. I’d recommend you to go over the Navigate Event videos, they have high level instructions. I’m sure you can find videos of previous integrations. I found the one with Workday in there.

Latest Community/Navigate 2025 Hackathon Submissions topics - SailPoint Developer Community

3

Hi @nitin_m_jain

We exactly achieved same use case in IdentityIQ recently. It is a similar implementation in ISC too.

OOTB SAP GRC connector helps you in achieving this, however one correction, provisioning for the roles happen through GRC and the status is reflected back in the access request of SailPoint. On high level this is the flow:

  1. User submits request in SailPoint
  2. SailPoint creates a request Id in GRC system
  3. Risk evaluation happens at GRC. When the role is approved, GRC provisions the role to the user. When rejected, no provision happens on the account.
  4. SailPoint polls for the request status to GRC and the information is updated back on the SailPoint access request.

Let me know if any questions and here is the detailed document about the same.