SAP Universal ID – your personal SAP identity for life

Create your SAP Universal ID: Three steps, two minutes, done!

Currently, SAP Universal ID is undergoing a key change: it will no longer serve as an Identity Provider (IdP), meaning it will no longer perform authentication to verify the identity of users attempting to log in. Instead the authentication will go through SAP standard authentication mechanism (SAP IAS).

 

The transformation will end on December 17th: after that users will have to use their email address specific to the user ID, or the specific/individual user ID (S-/P-user) to log in and the authentication will go through SAP standard authentication mechanism (SAP IAS).

The SAP Universal ID continues to provide a streamlined way to manage your SAP presence. Here are some key benefits, that stay active:

  • Keep your account for life: Your SAP Universal ID remains with you regardless of employment changes, ensuring continuous access.

  • Manage all your SAP user identities: Consolidate multiple SAP accounts into one identity, simplifying access and reducing the need to remember various credentials.

  • Preserve your reputation and achievements: Maintain your training completions, certifications, and contributions to SAP community forums and discussions, even when you switch organizations or change your email.

Overall, the SAP Universal ID simplifies your engagement with SAP services, allowing you to easily maintain and expand your professional identity within the SAP community.

If you have an SAP Universal ID, you can access the SAP Universal ID Account Manager, which is your single-entry point to view, update, and manage your personal information, account security settings, and associations to companies.

Please note: Your SAP Universal ID cannot be shared with others. It is a personal and unique identity meant for individual use.

Watch this video to see how simple it is to create an SAP Universal ID 
Create your SAP Universal ID
Need help registering?

Get SAP Universal ID support in your preferred channel.

Get support

The Future Evolution of SAP Universal ID: Manage all your user identities, learning and community reputation.

Originally positioned as "the key to the SAP world", SAP Universal ID is set for transformation. Going forward, instead with SAP Universal ID, you will authenticate with a dedicated user identity.

SAP Universal ID will remain a wallet to link multiple identities (S-/P-users). While direct authentication via SAP Universal ID will cease, users can still effectively manage their user IDs under one account.

Moreover, SAP Universal ID will preserve users' community reputations and learning certificates. This ensures the continuity of personal achievements across SAP platforms and services, reinforcing its pivotal role in user identity management within the SAP ecosystem.

 

Why Is SAP Making This Change?

These steps are part of a bigger transformation that aims to simplify authorization and access management, and with the option to bring your own identity offer a state-of-the-art technology to customers. It will enable more seamless digital interactions for customers, consistent across all digital touchpoints and cloud products. For more information see also
“Bring Your Own Identity: SAP’s Strategic Transformation of Identity and Authentication Management.” The changes in SAP Universal ID are paving the way towards this important goal, streamlining the transition to SAP's standard authentication mechanism (SAP IAS).

You can learn more about it in the Bring Your Own Identity: SAP's Strategic Transformation of Identity and Authentication Management blog post.

Frequently Asked Questions

General FAQs

The SAP Universal ID is a wallet to manage your SAP user identities. It ensures lifelong access to your account and preserves your reputation such as learning certificates and community content. You don’t have an SAP Universal ID yet? Set it up now: SAP Universal ID registration site

SAP Universal ID allows you to combine all your existing and future S/P-user accounts under a single password, eliminating the need to keep track of all your S/P-user IDs.

 

SAP Universal ID includes all your existing and future S/P-user identities. In the SAP Universal ID Account Manager, you can manage all your user identities, personal data, security, and privacy settings.

 

Your SAP Universal ID is personal and belongs to you throughout your working life. You can use it to preserve your learning certificates and community reputation even when you change job.

Visit the SAP Universal ID registration site and follow the instructions.

Your SAP Universal ID is personal and belongs to you throughout your working life. S-user IDs are provided by your company and function as an authorization. When you change roles or companies, the administrator will remove your S-user ID, but your SAP Universal ID remains with you.

SAP Universal ID supports the latest versions of Firefox, Chrome, Safari, and Edge, as well as iOS and Android browsers. Internet Explorer is not supported. However, please note that 3rd party cookies are required for authentication and login.

In general, it is not mandatory. However, if you want to preserve your community reputations and learning certificates, you will need to have an SAP Universal ID.

No, SAP Universal ID is a free account and requires no software installation.

If you want to delete your SAP Universal ID, please contact the Customer Interaction Center (CIC) for assistance.

Account Management

SAP Universal ID Account Manager is used to manage your linked accounts, personal data, security, and privacy settings.

During registration, you will be forwarded to the Linking Manager which will retrieve the S/P-user accounts that match the e-mail that you have verified.

If you already have an SAP Universal ID, you can link additional S/P-user ID(s) accounts anytime in SAP Universal ID Account Manager.

No, once you link your S/P-user ID to one SAP Universal ID, you cannot link it to another SAP Universal ID.

If you have already linked an S/P-user ID to your SAP Universal ID, it isn’t possible to link the same S/P-user ID to another SAP Universal ID.

SAP Universal ID does not support sharing of S-user IDs. Your administrator will need to create a unique S-user ID to ensure there is an identifiable person corresponding to each S-user ID. This will ensure data integrity, security, and compliance with legal regulations.

Currently, you have to log out and log in again with a different user. As we enable sites with enhanced capabilities, you will be able to switch between users within an active session.

Please contact your company administrator and request deletion.

Yes, you can use your personal e-mail address and you can also maintain multiple e-mail addresses. One of these e-mail addresses must be assigned as your primary address. You need to validate ownership of any e-mail address used in your SAP Universal ID.

Yes, you can maintain multiple e-mail addresses and assign one of these as your primary e-mail address through the SAP Universal ID Account Manager. Please note that you must also maintain the e-mail address of any S/P-user IDs linked to your SAP Universal ID, as the linkage to S/P-user IDs is based on a valid e-mail address.

SAP Universal ID is personal and only one person can own an SAP Universal ID. Therefore, SAP Universal ID does not support the use of shared e-mail addresses, such as info@security.com. This will ensure data integrity, security, and compliance with legal regulations.

The responsible company administrator will withdraw the permissions and authorizations to access the company’s systems. As a result, the S-user ID will be unlinked from your SAP Universal ID. You can continue to use your SAP Universal ID. If you move to another company, you can link a new S-user ID through SAP Universal ID Account Manager.

Super administrators can see if an S-user is linked to an SAP Universal ID.

Please refer to the following guideline: SAP Universal ID password change and reset.

If you still face challenges, please create an official support ticket for the support team to investigate further.

If the email address has changed due to a company name /domain update, then the user has to add the new email address/domain to their SAP Universal ID in the SAP Universal ID Account Manager. Similarly, the new S-user email address linked to an SAP Universal ID needs to be added to the SAP Universal ID first.

 

Detailed Instructions: Please add the new email address under the “Accounts” tab by clicking on the button “Add accounts”. For security reasons, every time a new email address is added to the SAP Universal ID, ownership of the email address must be validated via a passcode that is sent. You can then find the newly added email address in the “Personal Info” tab and can select it as a new primary email address for your SAP Universal ID if required. We strongly recommend linking your personal email address as a back up to your SAP Universal ID so that you can continue to use your SAP Universal ID for a lifetime. If you change companies, your old S-user ID will expire and be deleted by the company administrator. If you can no longer prove ownership of the previous company email address linked to your SAP Universal ID, your personal email address will provide continued access to your SAP Universal ID.

See SAP Knowledge Base Article: 2882908 - How to add an additional user or e-mail address to a SAP Universal ID (UID) - SAP ONE Support Launchpad

No, nothing will be blocked because the linkage of S-users to an SAP Universal ID will not be mandatory until 2023. Blocking in this context means that an S-user cannot be used until linked to an SAP Universal ID. However, we recommend you start migrating to an SAP Universal ID as early as possible as SAP applications/portals will gradually adopt enhanced integration with SAP Universal ID (e.g. Built-In Support, sap.com, developers.sap.com). Please note that SAP Universal ID provides no disadvantage to S-users. The S-user remains the back-end authorization mechanism for all your support and service activities.

For more information, please see

Associated certifications, SAP Community content and reputation will not be lost with SAP Universal ID. On the contrary, the aim is to have all of your information linked to your personal SAP Universal ID so that you can take it with you wherever you go.

Action from your side is required based on the following two scenarios:

  • If you leave a company and the S-user is about to be deleted, you need to add a second e-mail to your SAP Universal ID to keep it accessible for you (How to add an additional user or e-mail address to the SAP Universal ID (UID)). Once you receive your new S-user, link it to your SAP Universal ID and raise a Support ticket to request the transfer of the certificates to the new S-user.

  • If your S-user is about to expire and you'd like to keep associated certifications, SAP Community content and reputation, please create an SAP Universal ID and link your S-user before it expires.​ See Community Help for more information.

The SAP Universal ID team is in close collaboration with the SAP platform teams to ensure that users will always keep their attributed personal content such as training and certifications, blog posts, preferences etc. SAP’s Learning Organization (learning.sap.com) is currently working on an automated process for this specific type of transfer based on SAP Universal ID.

 

One step towards that goal is the Community account merge tool which is live within the People Profile and will let users consolidate content from selected accounts to a single primary account within the SAP Universal ID. It will ensure a smooth transition of the SAP Community site (comunity.sap.com) to the future SAP Universal ID enhanced integration.

For any help required with SAP Universal ID, customers and partners should create an SAP Support ticket or contact the Customer Interaction Center (CIC).

Technical Communication Users are excluded and are out of scope for user management governance and guidelines.

VAR-d Partners

If the S-user expires and/or is deleted by the administrator, the user cannot access the systems on behalf of the customer any longer even if it was linked to an SAP Universal ID. 

 

In general, it is the customers and partners administrators’ responsibility to maintain their users. SAP is assisting customers and partners in their responsibility for user administration by assigning an expiry date to all S-users. The S-user Lifetime process helps protect your sensitive company information and ensures compliance with the pertinent data protection regulations that may apply to you (e.g. GDPR).

 

No, please note that SAP Universal ID does not support sharing of S-user IDs. It isn’t possible to link the same S/P-user ID to another SAP Universal ID, if you have already linked an S/P-user ID to your SAP Universal ID. Shared S-users make it impossible to tell who has access to an account, with individual S-user IDs that risk is reduced. Legal regulations require us to know who we transact with and to ensure we are not doing business with sanctioned persons. Your administrator will need to create a unique S-user ID to ensure there is an identifiable person corresponding to each S-user ID. This will ensure data integrity, security, and compliance with legal regulations.

 

Please note: SAP does not allow new SAP Universal ID creation with a shared email address. Furthermore we ask users and administrators to comply with our Identity and User Management policy. For more information, please see our email compliance guidelines.

In general, up to 10 different email addresses or up to 100 users (S-/P-users) can be linked to a single SAP Universal ID. Please note, that linked accounts must belong to one person. Account sharing results in account suspension.

For security and compliance reasons, shared user IDs and email addresses cannot be used to create SAP Universal IDs and are not condoned by SAP.  For that reason, these types of users will not be allowed to create an SAP Universal ID and will have to continue authenticating using the legacy users and processes.  However, we strongly recommend starting to migrate to SAP Universal ID and linking all S-users as early as possible.  Note, up to 10 different email addresses or up to 100 users (S-/P-users) can be linked to a single SAP Universal ID. When a user uses more than a 100 S/P-users or more than 10 emails they are not considered personal use but, on-behalf management use.

Yes, this is possible. Super and Cloud Administrators are required to maintain a list of their company's email domains, ensuring that S-users match their corporate email address. Super and Cloud Administrators will still be allowed to use public or free email sites after entering an acceptable reason in the note field either in the user creation form or in the user’s contact detail page.

For more information, please see our email compliance guidelines.

The C-user sap.com email address needs to be added to the SAP Universal ID. Please add the email address under the “Accounts” tab by clicking on the button “Add accounts”. For security reasons, every time a new email address is added to the SAP Universal ID, ownership of the email address must be validated via a passcode that is sent. Afterwards, the C-user needs to sign in to sap.com to complete the linking and authentication process.

We released an additional functionality as part of the Incident Management. In the incident form you can take advantage of E-mail Distribution List (Group) Notifications. You can now add an additional contact to an e-mail distribution list, that is not an S-user, when creating or editing an incident. Once added, this contact will be notified of any changes to the incident. Additional contacts or e-mail distribution list(s) can be added by clicking the “+” button next to the Contact Details. In the Name field you can add a name for your contact or e-mail distribution list, and in the E-Mail field you can then either enter your e-mail distribution list or individual e-mail address. For more information, please see: Release notes for SAP for Me and the SAP ONE Support Launchpad including its applications

twitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixeltwitter pixel