Oracle GRC integration with OIM for SoD Error: String index out of range: -7
Oracle Identity Manager (OIM) can be integrated Oracle Identity Analytics (OIA) or Oracle/SAP GRC (Governance, Risk, and Compliance) for SoD (Segregation of Duties).
We recently implemented OIM integration with Oracle GRC (OAACG – Oracle Application Access Control Governor) for Oracle E-Business Suite (EBS R12) for SoD.
EBS Responsibility Provisioning from OIM to EBS were failing with error “String index out of range: -7 SODCheck Completed with Error“
Error in OIM logs reported was
____
<Apr 24, 2014 7:25:20 PM BST> <Error> <XELLERATE.JAVACLIENT> <BEA-000000> <oracle.iam.grc.sod.scomp.impl.oaacg.analysis. SoDAnalysisExecutionOperOAACG80/ startPreventiveSynConflictSimulation: String index out of range: -7>
<Apr 24, 2014 7:25:20 PM BST> <Error> <XELLERATE.JAVACLIENT> <BEA-000000> <SILServiceImpl. executeSynchronousSoDSimulation SILServiceComponentException : String index out of range: -7>
<Apr 24, 2014 7:25:20 PM BST> <Error> <XELLERATE.JAVACLIENT> <BEA-000000> <Class/Method: InitiateSODCheck/makeSODCall encounter some problems: String index out of range: -7java.lang.StringIndexOutOfBoundsException: String index out of range: -7>
<Apr 24, 2014 7:25:20 PM BST> <Error> <XELLERATE.JAVACLIENT> <BEA-000000> <SOD Check Result is null>
____________
- OIM connects to OAACG module of GRC using IT Resource (defined in OIM), check screenshot below.
- In GRC you define datasource and this datasource (In GRC) should match with datasource in OIM IT Resource for OAACG-ITRes
Fix: If you are hitting error like above then ensure that Datasource defined in OIM IT Resource “OAACG-ITRes” should match with data source defined in GRC.