Authentication and single sign-on for users in the cloud

Gain controlled cloud-based access to business processes, applications, and data. It simplifies your user experience through authentication mechanisms, single sign-on, on-premise integration, and convenient self-service options.

Benefits

  • Enable central single sign-on for SAP cloud solutions

    Offers central SSO endpoint for all SAP cloud applications and pre-configured or semi-automated trust configuration​.

  • Facilitate integration of SAP solutions

    Identity Authentication offers common identity for users, as well as a unified way for user management and security token service for protection of ​system-to-system communication. Data across applications can be correlated ​(precondition for central foundation services)​.

  • Streamline authentication mechanisms

    All SAP cloud solutions can offer their users the same authentication mechanisms​, as well as strong authentication with configurable multi-factor (MFA) enforcement. Also, easy separation mechanism for multiple user stores and flexible configuration where to validate user's credentials.

  • Delegate Authentication

    Delegate authentication to a 3rd party or on-premise IdP, as default or based on a condition like IdP, email domain, user type or user group, and thus enable SSO across on-premise and the cloud.

  • Use API

    Manage users and groups, invite users, customize end-user UI texts in any language with SCIM REST API.

  • Configure Risk-Based Authentication

    Help enforce two-factor authentication based on IP ranges, user groups, user type, or authentication method to manage access to a business application.

  • Authentication and SSO

    Choose one of the supported authentication methods to control access to your application, like Form, SPNEGO, Social, or two-factor authentication. Use SAML 2.0 to provide single sign-on. Integrate your application programmatically using authentication via API.