{"id":27587,"date":"2022-12-15T05:27:34","date_gmt":"2022-12-15T10:27:34","guid":{"rendered":"https:\/\/xiting.com\/?p=27587"},"modified":"2026-02-24T17:34:07","modified_gmt":"2026-02-24T16:34:07","slug":"connecting-sap-identity-authentication-service-to-azure-ad","status":"publish","type":"post","link":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/","title":{"rendered":"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book"},"content":{"rendered":"\n<p>In a hybrid SAP landscape, it is a fundamental task to coordinate and centralize access to your different applications and to provide centralized user and authentication management. A well-established central hub responsible for trust, user authentication, and ID provisioning that covers all your SAP (cloud) applications and BTP accounts can be a reality.<\/p>\n\n\n\n<p>In this context, you have probably heard of the SAP Identity Authentication Service (IAS) as part of the SAP Cloud Identity Services (SCI). After all, this central component has now become indispensable. The more important becomes the topic of integration with your existing SAML Identity Provider and leveraging authentication processes, SSO, and security capabilities already in use. After all, user accounts remain dangerous gateways and one of the prime targets for cyber-attacks. A central IAM approach is a must-have nowadays. The more crucial are topics like risk-based authentication, conditional access, MFA\/FIDO2, and flexible handling of AuthN\/AuthZ claims and NameID formats to ensure the greatest level of flexibility and security.<\/p>\n\n\n\n<p>In case you are new to the topic, we recommend reading the following Xiting blogs first:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/xiting.com\/en\/sap-identity-authentication-service-overview\/\">Overview and integration capabilities of SAP IAS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/xiting.com\/en\/sap-ias-in-proxy-mode-and-its-coexistence-with-azure-active-directory\/\">Using SAP IAS via Proxy Mode in coexistence with your existing Identity Provider<\/a><\/li>\n<\/ul>\n\n\n\n<p>Furthermore, we look forward to informing you about our cloud services, which focus on the area of Identity &amp; Access Management in this\u00a0<a href=\"https:\/\/xiting.com\/en\/cloud-identity-services-and-iam-portfolio\/\" target=\"_blank\" rel=\"noreferrer noopener\">blog<\/a>\u00a0article. Also, stay tuned as we will launch a new service related to IAM based on the SAP Cloud Identity Services tailored for small and medium-sized businesses without IDM.<\/p>\n\n\n\n<p>Our latest e-book deals with the integration of SAP Identity Authentication Service with your Azure Tenant. We outline this topic in more detail, specifically related to OpenID Connect. At the same time, we cover some basics, explain the functionality, and use cases of the most relevant standards like SAML 2.0, OAuth 2.0, and OpenID Connect. In addition, we provide you with a <strong>configuration guideline<\/strong> that provides a deeper insight and supports your identity federation setup between your SAP IAS and Azure tenants.<\/p>\n\n\n\n<p>On behalf of Xiting, we would like to thank you for your support and partnership. We wish you and your loved ones a merry Christmas and a happy holiday season.<\/p>\n\n\n\n<p>Your Xiting IAM team!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-read-more-in-our-latest-sap-ias-e-book\"><strong>READ MORE IN OUR LATEST SAP IAS E-BOOK:<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1000\" height=\"750\" src=\"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/sap-ias_1000-x-750-px.png\" alt=\"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect\" class=\"wp-image-27600\" style=\"width:634px;height:475px\" srcset=\"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/sap-ias_1000-x-750-px.png 1000w, https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/sap-ias_1000-x-750-px-300x225.png 300w, https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/sap-ias_1000-x-750-px-768x576.png 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>IF YOU WANT TO READ ON, REGISTER HERE AND DOWNLOAD&nbsp;A&nbsp;FULL&nbsp;COPY OF THIS E-BOOK<\/strong>:<\/h2>\n\n\n\n<script charset=\"utf-8\" type=\"text\/javascript\" src=\"\/\/js-eu1.hsforms.net\/forms\/embed\/v2.js\"><\/script>\n<script>\n  hbspt.forms.create({\n    region: \"eu1\",\n    portalId: \"25088517\",\n    formId: \"01ec835b-47ff-4e6f-a43e-c61b01455f35\"\n  });\n<\/script>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a hybrid SAP landscape, it is a fundamental task to coordinate and centralize access to your different applications and to provide centralized user and authentication management. A well-established central hub responsible for trust, user authentication, and ID provisioning that covers all your SAP (cloud) applications and BTP accounts can be a reality. In this [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":27610,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[1835],"tags":[951,1514,1607],"class_list":["post-27587","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cloud-security","tag-sap-cloud-identity-services","tag-sap-iam"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.5 (Yoast SEO v27.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Connect SAP IAS as a Proxy to Azure AD using OpenID Connect<\/title>\n<meta name=\"description\" content=\"Our latest e-book deals with the integration of SAP IAS with your Azure Tenant, specifically related to OpenID Connect.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book\" \/>\n<meta property=\"og:description\" content=\"In a hybrid SAP landscape, it is a fundamental task to coordinate and centralize access to your different applications and to provide centralized user and\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiting\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/XitingAG\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-15T10:27:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-24T16:34:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/shutterstock_1964316664-scaled-e1671099994986.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1800\" \/>\n\t<meta property=\"og:image:height\" content=\"979\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Carsten Olt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@jsterr@xiting.de\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Carsten Olt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/\"},\"author\":{\"name\":\"Carsten Olt\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/person\\\/3c32c7de1132d012e263720a9f3300a2\"},\"headline\":\"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book\",\"datePublished\":\"2022-12-15T10:27:34+00:00\",\"dateModified\":\"2026-02-24T16:34:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/\"},\"wordCount\":410,\"publisher\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/shutterstock_1964316664-scaled-e1671099994986.jpg\",\"keywords\":[\"Cloud security\",\"SAP Cloud Identity Services\",\"SAP IAM\"],\"articleSection\":[\"SAP Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/\",\"name\":\"Connect SAP IAS as a Proxy to Azure AD using OpenID Connect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/shutterstock_1964316664-scaled-e1671099994986.jpg\",\"datePublished\":\"2022-12-15T10:27:34+00:00\",\"dateModified\":\"2026-02-24T16:34:07+00:00\",\"description\":\"Our latest e-book deals with the integration of SAP IAS with your Azure Tenant, specifically related to OpenID Connect.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#primaryimage\",\"url\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/shutterstock_1964316664-scaled-e1671099994986.jpg\",\"contentUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/shutterstock_1964316664-scaled-e1671099994986.jpg\",\"width\":1800,\"height\":979},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/downloads\\\/connecting-sap-identity-authentication-service-to-azure-ad\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/xiting.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/\",\"name\":\"Xiting\",\"description\":\"Your Expert for SAP Security\",\"publisher\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/xiting.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#organization\",\"name\":\"Xiting\",\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/xiting-logo.svg\",\"contentUrl\":\"https:\\\/\\\/xiting.com\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/xiting-logo.svg\",\"width\":1,\"height\":1,\"caption\":\"Xiting\"},\"image\":{\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/XitingAG\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1345129\\\/\",\"https:\\\/\\\/www.instagram.com\\\/xiting.global\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/xiting.com\\\/en\\\/#\\\/schema\\\/person\\\/3c32c7de1132d012e263720a9f3300a2\",\"name\":\"Carsten Olt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c35c3b7ce5d81579234be25ef570938712ba95e2cb8e87f2a79b81be928499a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c35c3b7ce5d81579234be25ef570938712ba95e2cb8e87f2a79b81be928499a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c35c3b7ce5d81579234be25ef570938712ba95e2cb8e87f2a79b81be928499a?s=96&d=mm&r=g\",\"caption\":\"Carsten Olt\"},\"description\":\"Carsten Olt has been working as a Managing SAP Security Consultant since 2016, responsible for Secure Authentication &amp; SSO and SAP Cloud Security Services at Xiting in Germany. As a member of the IAM team, he is also a team leader who conveys the company's goals and strategies to employees and has organizational responsibility. With a security-minded approach, Carsten has international project and IT security experience in many industries. He has been working in IT-Security since 2001, specializing in SAP security since 2010. He is a subject matter expert for SAP Single Sign-On 3.0 and a trainer for the WDESSO course. His current focus is on supporting customers in solving authentication and security challenges within hybrid SAP landscapes, as well as designing and implementing holistic authentication concepts. Carsten is an ISACA CISA and a former MCP and RHCE with an ISP background, and he looks at security from different angles. He also translates between SAP and IT security vocabulary. Carsten has in-depth experience in multi-vendor architectures and MSFT\\\/Azure components, dealing with all the requirements concerning SAML 2.0, OAuth, OpenID Connect, SCIM, X.509 CBA &amp; PKI, MFA, SAP SSO, and Secure Network Communications, Kerberos\\\/SPNEGO, data security and encryption, as well as digital signatures. Carsten is experienced in SAP on-premises components such as S\\\/4HANA, ABAP, and Java, as well as security solutions like SSO 3.0. Since 2019, he has focused on SAP-Cloudified environments, specifically the SAP Cloud Identity Services and SAP BTP, as well as SaaS integrations concerning IAM. He deals with hybrid SAP security in conjunction with Azure Active Directory, ADDS, ADFS, ADCS, Reverse Proxies\\\/WAF, SAP Web Dispatcher, SAP Cloud Connector, third-party products, and infrastructure components.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/jsterr@xiting.de\"],\"url\":\"https:\\\/\\\/xiting.com\\\/en\\\/author\\\/carsten-olt\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Connect SAP IAS as a Proxy to Azure AD using OpenID Connect","description":"Our latest e-book deals with the integration of SAP IAS with your Azure Tenant, specifically related to OpenID Connect.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book","og_description":"In a hybrid SAP landscape, it is a fundamental task to coordinate and centralize access to your different applications and to provide centralized user and","og_url":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/","og_site_name":"Xiting","article_publisher":"https:\/\/www.facebook.com\/XitingAG","article_published_time":"2022-12-15T10:27:34+00:00","article_modified_time":"2026-02-24T16:34:07+00:00","og_image":[{"width":1800,"height":979,"url":"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/shutterstock_1964316664-scaled-e1671099994986.jpg","type":"image\/jpeg"}],"author":"Carsten Olt","twitter_card":"summary_large_image","twitter_creator":"@jsterr@xiting.de","twitter_misc":{"Written by":"Carsten Olt","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#article","isPartOf":{"@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/"},"author":{"name":"Carsten Olt","@id":"https:\/\/xiting.com\/en\/#\/schema\/person\/3c32c7de1132d012e263720a9f3300a2"},"headline":"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book","datePublished":"2022-12-15T10:27:34+00:00","dateModified":"2026-02-24T16:34:07+00:00","mainEntityOfPage":{"@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/"},"wordCount":410,"publisher":{"@id":"https:\/\/xiting.com\/en\/#organization"},"image":{"@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#primaryimage"},"thumbnailUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/shutterstock_1964316664-scaled-e1671099994986.jpg","keywords":["Cloud security","SAP Cloud Identity Services","SAP IAM"],"articleSection":["SAP Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/","url":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/","name":"Connect SAP IAS as a Proxy to Azure AD using OpenID Connect","isPartOf":{"@id":"https:\/\/xiting.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#primaryimage"},"image":{"@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#primaryimage"},"thumbnailUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/shutterstock_1964316664-scaled-e1671099994986.jpg","datePublished":"2022-12-15T10:27:34+00:00","dateModified":"2026-02-24T16:34:07+00:00","description":"Our latest e-book deals with the integration of SAP IAS with your Azure Tenant, specifically related to OpenID Connect.","breadcrumb":{"@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#primaryimage","url":"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/shutterstock_1964316664-scaled-e1671099994986.jpg","contentUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2022\/12\/shutterstock_1964316664-scaled-e1671099994986.jpg","width":1800,"height":979},{"@type":"BreadcrumbList","@id":"https:\/\/xiting.com\/en\/downloads\/connecting-sap-identity-authentication-service-to-azure-ad\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiting.com\/en\/"},{"@type":"ListItem","position":2,"name":"Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book"}]},{"@type":"WebSite","@id":"https:\/\/xiting.com\/en\/#website","url":"https:\/\/xiting.com\/en\/","name":"Xiting","description":"Your Expert for SAP Security","publisher":{"@id":"https:\/\/xiting.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiting.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiting.com\/en\/#organization","name":"Xiting","url":"https:\/\/xiting.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiting.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/xiting.com\/wp-content\/uploads\/2019\/08\/xiting-logo.svg","contentUrl":"https:\/\/xiting.com\/wp-content\/uploads\/2019\/08\/xiting-logo.svg","width":1,"height":1,"caption":"Xiting"},"image":{"@id":"https:\/\/xiting.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/XitingAG","https:\/\/www.linkedin.com\/company\/1345129\/","https:\/\/www.instagram.com\/xiting.global\/"]},{"@type":"Person","@id":"https:\/\/xiting.com\/en\/#\/schema\/person\/3c32c7de1132d012e263720a9f3300a2","name":"Carsten Olt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c35c3b7ce5d81579234be25ef570938712ba95e2cb8e87f2a79b81be928499a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c35c3b7ce5d81579234be25ef570938712ba95e2cb8e87f2a79b81be928499a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c35c3b7ce5d81579234be25ef570938712ba95e2cb8e87f2a79b81be928499a?s=96&d=mm&r=g","caption":"Carsten Olt"},"description":"Carsten Olt has been working as a Managing SAP Security Consultant since 2016, responsible for Secure Authentication &amp; SSO and SAP Cloud Security Services at Xiting in Germany. As a member of the IAM team, he is also a team leader who conveys the company's goals and strategies to employees and has organizational responsibility. With a security-minded approach, Carsten has international project and IT security experience in many industries. He has been working in IT-Security since 2001, specializing in SAP security since 2010. He is a subject matter expert for SAP Single Sign-On 3.0 and a trainer for the WDESSO course. His current focus is on supporting customers in solving authentication and security challenges within hybrid SAP landscapes, as well as designing and implementing holistic authentication concepts. Carsten is an ISACA CISA and a former MCP and RHCE with an ISP background, and he looks at security from different angles. He also translates between SAP and IT security vocabulary. Carsten has in-depth experience in multi-vendor architectures and MSFT\/Azure components, dealing with all the requirements concerning SAML 2.0, OAuth, OpenID Connect, SCIM, X.509 CBA &amp; PKI, MFA, SAP SSO, and Secure Network Communications, Kerberos\/SPNEGO, data security and encryption, as well as digital signatures. Carsten is experienced in SAP on-premises components such as S\/4HANA, ABAP, and Java, as well as security solutions like SSO 3.0. Since 2019, he has focused on SAP-Cloudified environments, specifically the SAP Cloud Identity Services and SAP BTP, as well as SaaS integrations concerning IAM. He deals with hybrid SAP security in conjunction with Azure Active Directory, ADDS, ADFS, ADCS, Reverse Proxies\/WAF, SAP Web Dispatcher, SAP Cloud Connector, third-party products, and infrastructure components.","sameAs":["https:\/\/x.com\/jsterr@xiting.de"],"url":"https:\/\/xiting.com\/en\/author\/carsten-olt\/"}]}},"_links":{"self":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/posts\/27587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/comments?post=27587"}],"version-history":[{"count":0,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/posts\/27587\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/media\/27610"}],"wp:attachment":[{"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/media?parent=27587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/categories?post=27587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiting.com\/en\/wp-json\/wp\/v2\/tags?post=27587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}