SAP Universal ID – one identity for life!
SAP Universal ID provides a unified account across SAP sites that links all your existing company associations known as S-user IDs and allows you to switch between them as needed.
- Take control of your experience: Own and manage your personal SAP identity.
- Keep your account for life: Use it wherever you go, regardless of where you work.
- Use one login for all of your accounts: Manage one account and password by linking all your existing company accounts (S-user IDs) in one universal account.
Once your account is set up, you can access the SAP Universal ID Account Manager, which is your single-entry point to view, update, and manage your personal information, account security settings, and associations to companies.
Get more from your experience on SAP.com with an SAP Universal ID
Create your SAP Universal ID account today to access free software trials, analyst reports and white papers, SAP Community, and virtual events.
Next, you can create your own personal SAP.com dashboard based on your interests. You can receive notifications when new content is added, save content to view later, and pick up where you left off with recently viewed content.
Explore the road map for SAP Universal ID
SAP Universal ID supports over 11,000 SAP sites, including SAP.com, SAP for Me, SAP Community, SAP ONE Support Launchpad, SAP Support Portal, SAP Learning Hub, and SAP Partner Portal.
The enablement of SAP Universal ID on SAP sites will happen in two phases:
Phase one – Conditional integration: You may use your S-user IDs or your SAP Universal ID to log in.
Phase two – Enhanced integration: Accessing a site with enhanced integration is only possible with your SAP Universal ID login credentials. Direct Access via S-user IDs is no longer supported.
- Status: Targeted date to migrate all S-user IDs to SAP Universal ID accounts until 2023
For more information, please read this blog: Conditional and Enhanced Integration for SAP Universal ID
As sites begin to support enhanced SAP Universal ID integration, users will be required to link existing S-user IDs to their SAP Universal ID. All new S-users must be linked to an SAP Universal ID, as the S-user provides the authorization entitlement under the control of SAP Universal ID.
With enhanced integration, switching between S-user IDs is a simple process, available from the Account Selector, with no need to log out and log in.
SAP.com, developers.sap.com and the Built-In Support application all provide enhanced integration. All SAP platforms will transition to enhanced integration as a default authentication method in the upcoming year depending on the respective road maps for each of the SAP products. Additionally, necessary security measures must be taken into consideration. Following our target migration date, there will be no stand-alone users and all accounts will be SAP Universal ID accounts in 2023.
For additional information, see:
- One Identity for Life (SAP Thought Leadership Paper)
- Identity and User Management Policy
- Blog: SAP Universal ID Simplified Login Experience
- Blog: Conditional and Enhanced Integration for SAP Universal ID
- Blog: Identity and User Management Transformation at SAP
- Blog: SAP Universal ID: Register for Your SAP Universal ID by October 12 to Continue Logging Into SAP.com
Frequently Asked Questions
SAP Universal ID provides easier access to SAP sites. With SAP Universal ID, you have one single SAP account for life. It gives you the ability to log in once and choose between your S/P-user IDs, enabling you to easily switch between users and manage your account profile.
SAP Universal ID allows you to combine all your existing and future S/P-user accounts under a single password, eliminating the need to keep track of all your S/P-user IDs.
SAP Universal ID provides access to over 500 SAP sites, including SAP.com, SAP for Me, SAP Community, SAP ONE Support Launchpad, SAP Support Portal, SAP Learning Hub, and SAP Partner Portal.
Please ensure you select the appropriate S-user for the site you wish to access with your SAP Universal ID.
Your SAP Universal ID is personal and belongs to you throughout your working life. S-user IDs are provided by your company and function as an authorization. When you change roles or companies, the administrator will remove your S-user ID, but your SAP Universal ID remains with you.
SAP Universal ID supports the latest versions of Firefox, Chrome, Safari, and Edge, as well as iOS and Android browsers. Internet Explorer is not supported. However, please note that 3rd party cookies are required for authentication and login.
Eventually, SAP Universal ID will supersede existing S/P-user IDs to log in to SAP sites. When SAP Universal ID becomes mandatory, your S/P-user IDs linked to your SAP Universal ID remain available. As of the second half of 2021, any new S-user ID created will automatically link to your SAP Universal ID.
No, SAP Universal ID is a free account and requires no software installation.
The verification code is needed to verify your e-mail address and to confirm that you own the e-mail address you provided. On receipt of the verification code, you will have 15 minutes to use it before it becomes inactive.
- Check your spam or junk folders
- Confirm that the e-mail address was entered correctly – if not entered correctly, you must start the creation process and request a new verification code
- Request a new verification code
SAP Universal ID Account Manager is used to manage your linked accounts, personal data, security, and privacy settings.
During registration, you will be forwarded to the Linking Manager which will retrieve the S/P-user accounts that match the e-mail that you have verified.
If you already have an SAP Universal ID, you can link additional S/P-user ID(s) accounts anytime in SAP Universal ID Account Manager.
No, once you link your S/P-user ID to one SAP Universal ID, you cannot link it to another SAP Universal ID.
If you have already linked an S/P-user ID to your SAP Universal ID, it isn’t possible to link the same S/P-user ID to another SAP Universal ID.
SAP Universal ID does not support sharing of S-user IDs. Your administrator will need to create a unique S-user ID to ensure there is an identifiable person corresponding to each S-user ID. This will ensure data integrity, security, and compliance with legal regulations.
In the Account Selector, adjust the “Sort by” filter to “Login Date” and your most recently used account will appear at the top of the list.
Currently, you have to log out and log in again with a different user. As we enable sites with enhanced capabilities, you will be able to switch between users within an active session.
Please contact your company administrator and request deletion.
Yes, you can use your personal e-mail address and you can also maintain multiple e-mail addresses. One of these e-mail addresses must be assigned as your primary address. You need to validate ownership of any e-mail address used in your SAP Universal ID.
Yes, you can maintain multiple e-mail addresses and assign one of these as your primary e-mail address through the SAP Universal ID Account Manager. Please note that you must also maintain the e-mail address of any S/P-user IDs linked to your SAP Universal ID, as the linkage to S/P-user IDs is based on a valid e-mail address.
SAP Universal ID is personal and only one person can own an SAP Universal ID. Therefore, SAP Universal ID does not support the use of shared e-mail addresses, such as firstname.lastname@example.org. This will ensure data integrity, security, and compliance with legal regulations.
The responsible company administrator will withdraw the permissions and authorizations to access the company’s systems. As a result, the S-user ID will be unlinked from your SAP Universal ID. You can continue to use your SAP Universal ID. If you move to another company, you can link a new S-user ID through SAP Universal ID Account Manager.
Super administrators can see if an S-user is linked to an SAP Universal ID.
Please refer to the following guideline: SAP Universal ID password change and reset.
If you still face challenges, please create an official support ticket for the support team to investigate further.
If the email address has changed due to a company name /domain update, then the user has to add the new email address/domain to their SAP Universal ID in the SAP Universal ID Account Manager. Similarly, the new S-user email address linked to an SAP Universal ID needs to be added to the SAP Universal ID first.
Detailed Instructions: Please add the new email address under the “Accounts” tab by clicking on the button “Add accounts”. For security reasons, every time a new email address is added to the SAP Universal ID, ownership of the email address must be validated via a passcode that is sent. You can then find the newly added email address in the “Personal Info” tab and can select it as a new primary email address for your SAP Universal ID if required. We strongly recommend linking your personal email address as a back up to your SAP Universal ID so that you can continue to use your SAP Universal ID for a lifetime. If you change companies, your old S-user ID will expire and be deleted by the company administrator. If you can no longer prove ownership of the previous company email address linked to your SAP Universal ID, your personal email address will provide continued access to your SAP Universal ID.
See SAP Knowledge Base Article: 2882908 - How to add an additional user or e-mail address to a SAP Universal ID (UID) - SAP ONE Support Launchpad
No, nothing will be blocked because the linkage of S-users to an SAP Universal ID will not be mandatory until 2023. Blocking in this context means that an S-user cannot be used until linked to an SAP Universal ID. However, we recommend you start migrating to an SAP Universal ID as early as possible as SAP applications/portals will gradually adopt enhanced integration with SAP Universal ID (e.g. Built-In Support, sap.com, developers.sap.com). Please note that SAP Universal ID provides no disadvantage to S-users. The S-user remains the back-end authorization mechanism for all your support and service activities.
For more information, please see
Associated certifications, SAP Community content and reputation will not be lost with SAP Universal ID. On the contrary, the aim is to have all of your information linked to your personal SAP Universal ID so that you can take it with you wherever you go.
Action from your side is required based on the following two scenarios:
- If you leave a company and the S-user is about to be deleted, you need to raise a Support ticket and request the transfer of the certificates to the new S-user.
- If your S-user is about to expire and you'd like to keep associated certifications, SAP Community content and reputation, please create an SAP Universal ID and link your S-user before it expires. For more information click here.
The SAP Universal ID team is in close collaboration with the SAP platform teams to ensure that users will always keep their attributed personal content such as training and certifications, blog posts, preferences etc. SAP’s Learning Organization (learning.sap.com) is currently working on an automated process for this specific type of transfer based on SAP Universal ID.
One step towards that goal is the Community account merge tool which is live within the People Profile and will let users consolidate content from selected accounts to a single primary account within the SAP Universal ID. It will ensure a smooth transition of the SAP Community site (comunity.sap.com) to the future SAP Universal ID enhanced integration.
For any help required with SAP Universal ID, customers and partners should create an SAP Support ticket or contact the Customer Interaction Center (CIC).
Technical Communication Users are excluded and are out of scope for user management governance and guidelines.
If the S-user expires and/or is deleted by the administrator, the user cannot access the systems on behalf of the customer any longer even if it was linked to an SAP Universal ID.
In general, it is the customers and partners administrators’ responsibility to maintain their users. SAP is assisting customers and partners in their responsibility for user administration by assigning an expiry date to all S-users. The S-user Lifetime process helps protect your sensitive company information and ensures compliance with the pertinent data protection regulations that may apply to you (e.g. GDPR).
No, please note that SAP Universal ID does not support sharing of S-user IDs. It isn’t possible to link the same S/P-user ID to another SAP Universal ID, if you have already linked an S/P-user ID to your SAP Universal ID. Shared S-users make it impossible to tell who has access to an account, with individual S-user IDs that risk is reduced. Legal regulations require us to know who we transact with and to ensure we are not doing business with sanctioned persons. Your administrator will need to create a unique S-user ID to ensure there is an identifiable person corresponding to each S-user ID. This will ensure data integrity, security, and compliance with legal regulations.
Please note: SAP does not allow new SAP Universal ID creation with a shared email address. Furthermore we ask users and administrators to comply with our Identity and User Management policy. For more information, please see our email compliance guidelines.
In general, up to 10 different email addresses or up to 100 users (S-/P-users) can be linked to a single SAP Universal ID. Please note, that linked accounts must belong to one person. Account sharing results in account suspension.
For security and compliance reasons, shared user IDs and email addresses cannot be used to create SAP Universal IDs and are not condoned by SAP. For that reason, these types of users will not be allowed to create an SAP Universal ID and will have to continue authenticating using the legacy users and processes. However, we strongly recommend starting to migrate to SAP Universal ID and linking all S-users as early as possible. Note, up to 10 different email addresses or up to 100 users (S-/P-users) can be linked to a single SAP Universal ID. When a user uses more than a 100 S/P-users or more than 10 emails they are not considered personal use but, on-behalf management use.
Yes, this is possible. Super and Cloud Administrators are required to maintain a list of their company's email domains, ensuring that S-users match their corporate email address. Super and Cloud Administrators will still be allowed to use public or free email sites after entering an acceptable reason in the note field either in the user creation form or in the user’s contact detail page.
For more information, please see our email compliance guidelines.
The C-user sap.com email address needs to be added to the SAP Universal ID. Please add the email address under the “Accounts” tab by clicking on the button “Add accounts”. For security reasons, every time a new email address is added to the SAP Universal ID, ownership of the email address must be validated via a passcode that is sent. Afterwards, the C-user needs to sign in to sap.com to complete the linking and authentication process.
We released an additional functionality as part of the Incident Management. In the incident form you can take advantage of E-mail Distribution List (Group) Notifications. You can now add an additional contact to an e-mail distribution list, that is not an S-user, when creating or editing an incident. Once added, this contact will be notified of any changes to the incident. Additional contacts or e-mail distribution list(s) can be added by clicking the “+” button next to the Contact Details. In the Name field you can add a name for your contact or e-mail distribution list, and in the E-Mail field you can then either enter your e-mail distribution list or individual e-mail address. For more information, please see: Release notes for SAP for Me and the SAP ONE Support Launchpad including its applications