Skip to main content

Welcome to the Microsoft Entra ID Governance SAP Scenarios Hub

Microsoft Entra ID Governance Training Hub

Empower Your Identity Management Journey with Microsoft Entra ID

🔐 Unlock the Power of Identity Governance with SAP Applications

Welcome to our GitHub repository dedicated to SAP Integration scenarios with Microsoft Entra Identity Governance – a comprehensive resource hub designed to guide you through the intricacies of managing identities and access to SAP Applications effectively. In this hub we describe key SAP Integration scenarios:

  1. Migrate from SAP IDM to Microsoft Entra ID
  2. Connect to SAP HR Source (SAP SuccessFactors or HCM)
  3. Enable SSO for SAP Applications (Both Cloud and On-Premises)
  4. Enable Provisioning for SAP Applications (Both Cloud and On-Premises)
  5. Manage Access to SAP Applications

🚀 SAP IDM Migration

Explore Documentation: Dive into our extensive documentation to understand the core concepts and best practices in SAP IDM Migration

SAP IDM Migration Guide - Starts Here!

Public Doc: SAP IDM Migration Guide

Public Doc: Scenario - Using Microsoft Entra ID to secure access to SAP platforms and applications

Public Doc: Manage Access to your SAP Application

PPT Deck: Migrate from SAP IDM to Microsoft Entra

PPT Deck: Microsoft Entra - SAP Scenarios L300 Training

Please check Martin Raepple's blog post series on SAP Community blog that Provide technical guidance on how to plan and implement IAM for SAP applications with Microsoft Entra

SAP IDM Migration Training Video

Watch our SAP IDM migration to Microsoft Entra L300 Training here

Connect to SAP HR Source

Tutorial: Configure SAP SuccessFactors to Active Directory user provisioning

Tutorial: Configure SAP SuccessFactors to Microsoft Entra user provisioning

Tutorial: Configure attribute write-back from Microsoft Entra ID to SAP SuccessFactors

Demo Video: TBC

Enable SSO for SAP Applications

Tutorial: Microsoft Entra single sign-on (SSO) integration with SAP Cloud Identity Services

Demo Video: Configuring Single sign-on (SSO) for SAP Cloud Identity Services and SAP BTP Apps

Tutorial: Microsoft Entra single sign-on (SSO) integration with SAP NetWeaver

Demo Video: TBC

OBS: More SAP SSO scenarios and other SaaS applications are available here

Enable Provisioning for SAP Applications

Tutorial: Configure SAP Cloud Identity Services for automatic user provisioning

Demo Video: Configuring User Provisioning for SAP Cloud Identity Service

Tutorial: Configuring Microsoft Entra ID to provision users into SAP ECC with NetWeaver AS ABAP 7.0 or later

Demo Video: TBC

Manage Access to SAP Applications

Tutorial: Use Microsoft Entra groups for Authorization through Role Collections in IAS/BTP

Demo Video: Use Microsoft Entra Group and Access Packages to manage SAP Roles and application access

Use Microsoft Entra Private Access (ZTNA) to protect your on-premises SAP Apps

What is Global Secure Access?

Tutorial: Configure Per-App Access for Private Access

Demo Video: User Experience - Accessing SAP Logon protected by Global Secure Access (GSA)

🪙 Licensing

Microsoft Entra ID Governance

Visit the Entra ID Governance Licensing documentation

Visit the Entra Licensing documentation

📦 POC in a Box

To be Defined...