Provision any HRIS source or app target to SAP Cloud Identity Access Governance
Propagate JML events from any HRIS into SAP Cloud Identity Access Governance and auto-trigger downstream provisioning and governance in real-time, with 800 directories, apps, and databases available. Deliver day one productivity, improve security, and lower operational costs.
By Aquera, Inc.
Overview
Deliver day-one readiness for new hires
Automatically synchronize user information from SAP Cloud Identity Access Governance and initiate IT onboarding on a predetermined date before the employee starts. Immediately give employees access to applications necessary to do their jobs on day one.
Sync employee app access in real time from HR events
HRIS joiner, mover, and leaver events are automatically synced to SAP Cloud Identity Access Governance and all downstream applications. This ensures that when an employee joins, moves, or leaves an organization, their access to the systems is given, changed, or removed immediately.
Mitigate security gaps
When an employee leaves a company, their accounts on all connected apps are deprovisioned and access is immediately revoked. This eliminates security gaps arising from delayed removals and human error.
Details
Solution type
Extensions and Add-ons
Industry
Cross-Industry, Retail, Industrial Manufacturing, Healthcare, Travel and Transportation
Compatibility
Works with
SAP Identity Management
Features
Visualize integration flow to clarify scope for business users
The solution maps the inbound and outbound provisioning flows for SAP Cloud Identity Access Governance. From here, the configuration of individual connectors configuration is initiated.

Accelerate time to value with rapid solution configuration
In a single screen, select the application connector of interest, and identify its unique tenant URL for cloud applications or its IP for on-premise applications. Aquera generates a unique URL that designates a SCIM endpoint, which is then copied into SAP Cloud Identity Access Governance.

Run campaigns to collect entitlement file extracts for disconnected apps
For disconnected applications, the solution automates the manual pre-validation and collection processes of entitlement file extracts via regularly scheduled campaigns. Application owners are routinely reminded to upload their files per the campaign schedule.

Plans and pricing
All plans include:
Identity Sourcing Bridge
This edition sources users from various HRIS, applications, or repositories for synchronization into SAP CIAG.
Price unavailable in this regionThis edition sources users from various HRIS, applications, or repositories for synchronization into SAP CIAG.
Identity Target Bridge
This edition aggregates and provisions to one or more target applications or repositories
Price upon requestThis edition aggregates and provisions to one or more target applications or repositories
File Extract Collection Module
This editions automates the collection and validation of file extracts of entitlements for disconnected applications.
Price upon requestThis editions automates the collection and validation of file extracts of entitlements for disconnected applications.
Technical Information
| Solution type | Extensions and Add-ons |
| Category | Governance, Risk, Compliance (GRC), and Cybersecurity |
| Industry | Cross-Industry, Retail, Industrial Manufacturing, Healthcare, Travel and Transportation |
| Works with |
SAP Identity Management |
The following information is provided by the publisher and applies to the latest app version available on the SAP Store. SAP does not control these policies and procedures; the publisher is solely responsible for the accuracy of the provided information.
| Deployment |
|
| Globalization |
Internationalized for global customers This product has been internationalized to meet the needs of global customers (e.g. the use of Unicode). |
| Operations |
|
The following information is provided by the publisher and applies to the latest app version available on the SAP Store. SAP does not control these policies and procedures; the publisher is solely responsible for the accuracy of the provided information.
| Security |
|
| Compliance |
|
| Privacy policy |
SAP's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner. |
Resources
Overview Presentation
Data Sheet
Video Presentation
Publisher
Aquera, Inc.
Each day, Aquera automates millions of joiner, mover, leaver (JML) transactions for workers worldwide with the Aquera 360 HR & Identity Integration Platform-as-a-Service. Aquera runs on AWS, is SOC2 Type 2 certified, and deployed to over 1,000 customers. Aquera integrates HR and IT processes to maintain user and employee data in continuous sync across HR, Finance, IT directories, and the IT ecosystem. Aquera's library of over 900 connectors delivers out-of-the-box integrations with SAP SuccessFactors to automate provisioning, reduce operating costs, and improve security. Aquera extends the connectivity for IDP/IGA platforms for identity sourcing, user lifecycle management, and identity governance with its pre-built connectors. For disconnected apps, Aquera automates the process to collect and validate entitlement file extracts to enable rapid onboarding and governance of hundreds of apps, reducing the time-to-value for IGA projects.


