Um unbefugten Zugriff auf SAP-Systeme zu verhindern, wird eine solide Identity- und Access-Management-Strategie benötigt. Diese muss Sicherheitsfunktionen wie Authentifizierung, Autorisierung und Bereitstellung in der Cloud-Umgebung bereitstellen. Durch die Zentralisierung von Anmeldeverfahren und die automatisierte Verwaltung von Zugriffsrechten wird gewährleistet, dass nur berechtigte Personen Zugriff auf entsprechende Ressourcen erhalten.
Der SAP IAS (Identity Authentication Service) ist ein wesentlicher Bestandteil dieser Strategie. Die Single-Sign-On-Funktion ist insbesondere für Unternehmen relevant, die mehrere Cloud-Anwendungen nutzen, und ermöglicht, dass User sich nicht für jeden Dienst einzeln anmelden müssen. Dadurch wird nicht nur der Komfort erhöht, sondern auch das Risiko von Sicherheitslücken minimiert. Wie der SAP Identity Authentication Service Ihren Unternehmensalltag weiter optimieren kann, erfahren Sie in diesem Artikel.
SAP IAS (Identity Authentication Service) is a cloud service introduced in 2014. It is part of SAP Cloud Identity Services, together with Identity Provisioning, Identity Directory, and Authorization Management, and plays a central role in Identity & Access Management.
SAP IAS enables centralized authentication, identity federation, and Single Sign-On (SSO). The service provides functions for authentication, user management, and trust configuration, while authorization is primarily handled by the connected applications and, where applicable, SAP Cloud Identity Services – Authorization Management. A single logon to SAP cloud and on-premise applications protects the organization’s infrastructure and simplifies access for users.
SAP IAS supports a wide range of authentication methods, including username and password, one-time passwords, certificate-based authentication, and FIDO2-based biometric authentication. In addition, the SAP IAS architecture can be integrated with external identity providers such as Microsoft Entra ID to enable SSO there as well and ensure access to SAP cloud applications.
The SSO service is based on the SAML 2.0 and OpenID Connect standards and is accessible across devices. It offers flexible authentication options for employees, customers, and partners in both B2B and B2C contexts.
Although SAP IAS is a standalone service, it works closely with the SAP Business Technology Platform (BTP) and is an established component of many SAP cloud solutions, including SAP S/4HANA Public Cloud and SAP SuccessFactors.
Many SAP cloud solutions include SAP Cloud Identity Services as part of their bundle and may provide a pre-configured IAS tenant or trust setup, enabling fast and straightforward connection to SAP IAS. This makes the service a central integration point for SAP cloud applications within an organization. In the broader context of the SAP cloud portfolio, SAP IAS reduces the complexity and administrative overhead involved in onboarding new applications.
SAP IAS offers a wide range of functions that enable secure and flexible authentication and simplify service integration:
SAP IAS creates a security framework for SAP environments with a broad range of functions.
The key benefits of the service include:
Both SAP IAS and SAP IPS are components of SAP Cloud Identity Services and essential building blocks for Identity & Access Management. They work alongside Identity Directory and Authorization Management and can be used in a complementary way.
The table below provides an overview of the key differences:
| SAP IAS (Identity Authentication Service) | SAP IPS (Identity Provisioning Service) | |
|---|---|---|
| Area of Responsibility | Authentication, SSO, and identity federation | Identity lifecycle and provisioning |
| Core Function | Enables secure authentication and Single Sign-On (SSO) for cloud and on-premise applications | Manages identity lifecycle and provisioning processes across SAP and non-SAP systems |
| Key Features |
|
|
| Integration Options | With local and cloud applications, and external identity providers | With various source and target systems such as SAP SuccessFactors, Microsoft Entra ID, etc. |
| Standards | Common standards such as SAML 2.0 and OpenID Connect | SCIM and connector-specific APIs/protocols |
The Xiting QuickStart Implementation Service supports the rollout of SAP Cloud Identity Services IAS and IPS for organizations that are already using SAP IAS and IPS but have not yet deployed an Identity Management (IDM) system.
The service includes setting up identity federation between SAP IAS and your existing identity provider, as well as developing a tailored group concept for user identity distribution.
In this way, the QuickStart Implementation Service enables a seamless integration of cloud services and contributes to long-term improvements in both security and user experience.
For organizations needing broader BTP Security and Cloud Identity Services support, Xiting’s IAM consulting practice covers the full lifecycle – from initial architecture through to ongoing operations.
The SAP IAS architecture can be integrated with a wide range of applications. Several SAP cloud solutions – such as S/4HANA Public Cloud, SAP SuccessFactors, and SAP Integrated Business Planning – are already pre-configured and use SAP IAS for authentication by default.
You can also connect other SAML 2.0-compatible web applications such as SAP HANA, SAP BusinessObjects, or SAP Fiori – both in the cloud and on-premise.
SAP Business Technology Platform (BTP) is a cloud platform that supports organizations in developing, integrating, and running cloud applications. It brings together functions for automation, data analytics, and artificial intelligence in a unified environment. Through APIs, users can access not only SAP applications but also third-party services. SAP BTP thereby enables the integration of data from diverse sources.
Yes. SAP Cloud Identity Services, including Identity Authentication, are services of SAP Business Technology Platform (SAP BTP). IAS provides centralized authentication, Single Sign-On, and identity federation. SAP Cloud Identity Services are commercially included with many SAP cloud solutions and SAP BTP scenarios; usage for third-party applications may be subject to additional charges.
You are currently viewing a placeholder content from Vimeo. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from YouTube. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Facebook. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from hCaptcha to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from Turnstile to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Embedded Content. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Meetings. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Instagram. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from X. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information