PRODUCT NEWS | XCW

  • June 11, 2026
  • News
  • Valerie Neunheuser

Xiting Central Workflows Service Pack 7

Business Role Management, Recertification, and new SOAP Web Services

With Service Pack 7, Xiting Central Workflows introduces a number of important enhancements for Identity & Access Management in the SAP ABAP environment: from a complete Business Role Management solution to a structured recertification process and expanded SOAP web services for maximum integration flexibility.

What is Xiting Central Workflows (XCW)?

Xiting Central Workflows (XCW) is Xiting’s solution for standardized SAP workflows in Identity & Access Management. It provides best-practice processes for user administration in SAP ABAP systems – delivering greater efficiency, transparency, and security in authorization management, with fast implementation and straightforward day-to-day operations.

Service Pack 7 focuses on two key areas: expanding business role functionality and extending the SOAP web services. Additional improvements based on customer feedback have also been implemented.

Business Role Management

Service Pack 7 delivers the complete business role management feature set. At its core is the ability to version and reconcile roles, along with simplified logging tables that ensure background stability. Data consistency is maintained as XCW automatically compares existing assignments against live data in the target system.

If inconsistencies are detected, they can be resolved without requiring additional approvals. Changes to existing business roles are also handled automatically – assignments can be added or removed without triggering an approval workflow.

The figure below shows a reconciliation report for a user. The “Correct assignments via WF” button initiates the corresponding assignments:

Figure 1: Reconciliation
  • Using the "Correct assignments via WF" button, corrections can be triggered directly from the reconciliation report – quickly, transparently, and without additional approval overhead.

The dashboard provides a full overview of all activities performed: changes to business roles and the resulting user adjustments, triggered reconciliation actions, and additional activities such as business role reviews or requests submitted via Fiori.

Figure 2: Dashboard

Business Role Recertification

Regular reviews of authorization assignments are mandatory in many organizations – whether driven by compliance requirements or internal security policies. XCW Service Pack 7 introduces a structured recertification process to address this need:

  • Administrators create a revision and assign users, business roles, and responsible approvers.
  • Approvers are notified by email and can complete their review directly within XCW.
  • If an assignment is no longer considered valid, the business role is revoked immediately upon submission of the revision.
  • Administrators retain full visibility into the status of each revision and can send reminders to approvers as needed.

The screenshots below illustrate the process from both the administrator’s and the approver’s perspective:

1) Creating a revision with multiple approvers
Figure 3: Create revision
2) Approver view
Figure 4: Approver view
3) Approver decision
Figure 5: Approver decision
4) Administrator view after submission
Figure 6: Administrator view after submission

New SOAP web services

The SOAP web services offer maximum flexibility in designing IAM workflows – whether approval has already been completed in an external tool, an ITSM system serves as the entry point, or risk checks are needed early in the process.

Service Pack 7 expands the existing web services with the following capabilities:

Learn more about XCW

Risk analysis

  • Perform risk analyses independently of an XCW request

Business role request

  • Submit business role requests via web service

Detailed information

  • Extended access to detailed XCW data

User creation + role assignment

  • Combined process for user creation and business role assignment

Enhanced search and display in Fiori

The search functionality in Fiori has been significantly expanded. In addition to the username, searches can now be performed by first name, last name, function, department, or email address – particularly useful when user IDs are not self-explanatory.
Figure 7: Extended filters
Approvers also now see the department and function of the affected users directly in their view:

Figure 8: Department and function display

Additional improvements

Based on customer feedback, numerous smaller enhancements have been implemented:

  • Dashboard – Performance improvements and a new icon for failed executions

  • Password self-service – Users with disabled password login can no longer set a password via self-service

  • Business roles – User and role data is automatically populated when revoking a role

  • User request – Password is sent via email when a user is created in a new system

  • Central User Administration (CUA) – Role assignment is now possible even if the user has not yet been created in the subsystem; alternative RFC connections are configurable

  • New BAdI – A notification is displayed when SU01 is launched indicating that XCW is in use

  • Performance – General background performance improvements

Xiting Solution Day -XCW

Join our IAM experts Hazhan Salih and Valerie Neunheuser to learn more about the new features in our XCW solution for Identity Access Management in the SAP ABAP environment.
Register now
  • Date: July 3, 2026
  • Time: 09:00 AM – 11:00 AM EDT
  • Speaker: Hazhan Salih
For questions or interest in Xiting Central Workflows, please don’t hesitate to reach out. 
Contact us
Picture of Press Contact

Press Contact

Julia Sterr

Marketing Manager

Phone: +49 151 125 710 12

[email protected]

Melden Sie sich jetzt an!

Contact our experts

Kontaktieren sie unsere experten