Authentication with SAP Cloud Identity Services
Identity Access Management > Authentication and Single Sign On
This reference architecture describes the authentication flows for SAP SaaS via the SAP Cloud Identity Services - Identity Authentication.
Protect your data and applications with comprehensive security solutions.
View all tagsThis reference architecture describes the authentication flows for SAP SaaS via the SAP Cloud Identity Services - Identity Authentication.
Centralize identity lifecycle management with SAP Cloud Identity Services for secure authorization across SAP SaaS solutions.
Explore strategies to optimize the total cost of ownership for multitenant SAP applications, covering platform, maintenance, and resource allocation costs.
Decentralized Identity Verification (DIV) is a multi-tenant SAP BTP service that enables enterprise applications to use Self-Sovereign Identity (SSI) for secure, privacy-preserving inter-company communications.
Bring Your Own Wallet (BYOW) describes the provisioning model in which a dataspace member self-provisions SAP DIV on SAP BTP instead of receiving a wallet from the Operating Company. The operator still issues the membership credential, which is pushed to the member-hosted DIV wallet.
This reference architecture describes how SAP Decentralized Identity Verification (DIV) enables secure, privacy-preserving exchange of Product Carbon Footprint (PCF) data between supply chain partners using Self-Sovereign Identity and Verifiable Credentials, with each member provisioning their own DIV wallet (Bring Your Own Wallet).
This reference architecture describes how SAP Decentralized Identity Verification (DIV) issues, signs, and verifies W3C Verifiable Credentials and Verifiable Presentations on SAP BTP.
This reference architecture describes the IAM related flows for SAP Joule with SAP Build Work Zone and via the SAP Cloud Identity Services.
This reference architecture describes the identity lifecycle flows for SAP SaaS via the SAP Cloud Identity Services.
This reference architecture shows how SAP Enterprise Threat Detection provides log-driven security signals that are correlated in FortiSIEM and orchestrated through FortiSOAR to enable centralized monitoring incident investigation and automated response.
Design authentication and role management flows for SAP SaaS with SAP Cloud Identity Services.
Secure SAP BTP-hyperscaler connectivity with SAP Private Link service, protecting sensitive data within private networks.
This architecture outlines a cloud-agnostic approach for securely consuming services offered by hyperscalers from applications running outside their environments.
Securely access AWS services from external applications using robust identity and access management strategies.
Configure secure, keyless access to GCP resources using OIDC-based Workload Identity Federation. Workloads authenticate without storing service account keys.
Security is crucial for enterprise applications and in the multi-region scenario, the security setup varies from service to service.
Guidance on accessing SAP solutions via third-party MCP servers, covering governance guardrails, OWASP MCP Top 10 risks, and SAP's recommended managed MCP approach via SAP Integration Suite and Joule Studio.
Optimize multi-regional cloud solutions with insights into network design, provider usage, and service placement for superior performance.
Unifying Access Across for SAP Business Data Cloud using SAP Cloud Identity Services: IAS for SSO (SAML/OIDC) and IPS for SCIM provisioning. Includes scenarios with/without Enterprise IdP, lifecycle, authorization mapping, and operations.