Recommended Security Configurations for SAP Cloud Services
While the product security guides are comprehensive descriptions of various security parameters and options, we also offer a more condensed list of security recommendation documents for major SAP cloud products. These are focussing on customer-controlled configuration settings in a crisp tabular format. A list of available documents can be found in the following document. Download the DocumentEXTERNAL ‒ SAP and External Parties under NDA Only
EXTERNAL
Recommended Security Configurations for SAP
Cloud Services
Topic: SAP Cloud Services
Date: 17/02/2026
EXTERNAL
Recommended Security Configurations for SAP
Cloud Services
Topic: SAP Cloud Services
Date: 17/02/2026
© 2026 SAP SE or an SAP affiliate company. All rights reserved. See Legal Notice on www.sap.com/legal-notice for use terms, disclaimers, disclosures, or restrictions related to this material. 2 / 2
Summary SAP is committed to delivering trustworthy products and cloud services. Secure
configuration is essential to ensuring secure operations and data integrity. We
have therefore documented security recommendations, consolidated in this one
place, to help you configure the best security for your SAP portfolio.
This document provides security recommendations for SAP products and cloud
services and will be enhanced with additional products in the future. Security
configuration changes may impact business continuity and must be carefully
planned. Suggestions to improve any documented recommendations may be
submitted via a ticket for the relevant product.
SAP Security Recommendations By SAP Solutions
• SAP Business Technology Platform (BTP) (Link)
• SAP S/4 HANA Cloud (Link)
• SAP SuccessFactors (Link)
• SAP Ariba (Link)
• SAP Concur (Link)
• SAP Fieldglass (Link)
• SAP Commissions (Link)
• SAP Analytics Cloud (Link)
• SAP Integrated Business Planning for Supply Chain (SAP IBP) (Link)
• SAP Cloud for Customer (Link)
• SAP Data Intelligence (Link)
• SAP Configure Price Quote (SAP CPQ) (Link)
• SAP Commerce Cloud (Link)
• SAP Customer Data Cloud (Link)
• SAP Datasphere (Link)
Appendix: Relationship with
Baseline Template
The SAP Security Baseline Template (SAP Note 2253549) provides guidance on
formalizing an overarching SAP Baseline Security Policy for a customer landscape
(primarily on-premises but also hybrid setups) and enhancing it with prepared
content for automated checking via SAP Focused Run or SAP Solution Manager.
For future versions of this note, it is planned to refer to and build on the new
product-specific Security Recommendations above.
Summary SAP is committed to delivering trustworthy products and cloud services. Secure
configuration is essential to ensuring secure operations and data integrity. We
have therefore documented security recommendations, consolidated in this one
place, to help you configure the best security for your SAP portfolio.
This document provides security recommendations for SAP products and cloud
services and will be enhanced with additional products in the future. Security
configuration changes may impact business continuity and must be carefully
planned. Suggestions to improve any documented recommendations may be
submitted via a ticket for the relevant product.
SAP Security Recommendations By SAP Solutions
• SAP Business Technology Platform (BTP) (Link)
• SAP S/4 HANA Cloud (Link)
• SAP SuccessFactors (Link)
• SAP Ariba (Link)
• SAP Concur (Link)
• SAP Fieldglass (Link)
• SAP Commissions (Link)
• SAP Analytics Cloud (Link)
• SAP Integrated Business Planning for Supply Chain (SAP IBP) (Link)
• SAP Cloud for Customer (Link)
• SAP Data Intelligence (Link)
• SAP Configure Price Quote (SAP CPQ) (Link)
• SAP Commerce Cloud (Link)
• SAP Customer Data Cloud (Link)
• SAP Datasphere (Link)
Appendix: Relationship with
Baseline Template
The SAP Security Baseline Template (SAP Note 2253549) provides guidance on
formalizing an overarching SAP Baseline Security Policy for a customer landscape
(primarily on-premises but also hybrid setups) and enhancing it with prepared
content for automated checking via SAP Focused Run or SAP Solution Manager.
For future versions of this note, it is planned to refer to and build on the new
product-specific Security Recommendations above.