SAP Single Sign-On

Create a central user authentication so that your users only need one access for all applications and thus increase security

Benefits

IAM solutions

Our offer

Access data as a risk

During their daily work, your employees use many different applications, for each of which they usually have to be authenticated with their own access data. On the one hand, this is not very user-friendly, and on the other, it represents a real security risk.

When new employees are hired or dismissed, all accesses have to be created or deleted individually, which is a time-consuming process.
The repeated login when switching between applications interferes with the actual work.
If users forget one of their passwords, they have to interrupt their work and keep the IT helpdesk busy resetting the password.
The use of numerous passwords encourages the use of very simple passwords, even multiple times.
If, on the other hand, IT forces every employee to use complicated, one-time passwords, constant password reset requests are inevitable.

Benefits of Single Sign-On

SAP Single Sign-On provides you with a central administration of access data to which you can connect all your systems. This means that each user only has to remember one user ID, which they can use to log in once for all applications.

SAP Single Sign-On and SAP Identity Authentication Service (IAS) make a very significant contribution to raising security standards. The solutions support strong encryption methods and have extensive security features on board:

Mobile single sign-on with SAP Authenticator app
Risk-based authentication using access policies or two-factor authentication
External technologies such as smartcards or tokens can also be integrated

Whether SAP in Fiori Launchpad or classically in GUI – the SAP Secure Login Service for SAP GUI in conjunction with the SAP Identity Authentication Service (IAS) enables seamless authentication of users via the Corporate Identity Provider (IdP). This increases the protection of the SAP GUI and minimizes the administration effort when resetting forgotten passwords.

Single sign-on eliminates many points of attack on your IT in a single step, as only one connection to the central authentication server is established. This allows you to concentrate your protection measures on this one connection. The first time you authenticate to the system, an encrypted, time-limited ticket is issued to log in to additional applications. All these measures make it extremely difficult for digital intruders to obtain user data and gain unauthorized access to your system.

SAP Single Sign-On as part of Identity & Access Management

Go to Identity & Access Management (IAM) overview

Single sign-on enables end-to-end authentication against SAP and non-SAP applications. Central management of access data increases security, as only one user ID is required for all applications. This means that passwords can be made truly secure without restricting user convenience too much. Constantly changing passwords for each application is a thing of the past, and password resets are minimized. You also avoid duplicate administration efforts in your IT and free up valuable resources.

SAP Identity Management focuses on the traceable management and consistent distribution of digital identities throughout their lifecycle – assignment, repeated adjustments, deletion. The SAP IdM solution makes it possible to flexibly map individual workflows so that required user accounts, roles, and authorizations can be assigned in a rule-based and automated manner.

SAP Cloud Identity solutions enable authentication (IAS), single sign-on (SSO) and provisioning (IPS) against SAP cloud systems. SAP Cloud Identity Access Governance (IAG) provides the ability to manage workflows, risk checks and emergency access. Especially in a hybrid system landscape and in the communication between on-premise and cloud systems, the products ensure complete integration.

SAP Access Control is a product to identify risks, minimize risks and automate workflows.

Access Request Management (ARM)
Access Risk Analysis (ARA)
Emergency Access Management (EAM)
Business Role Management (BRM)

SAP Single Sign-On and SAP Cloud Identity Authentication Service (IAS) enable the integration of all your SAP and non-SAP systems into a central user authentication. Such a true single sign-on environment − even for mobile devices − eliminates the need for credentials for each individual application.

Our offering

Integration of single sign-on in SAP and non-SAP applications (on-premise and from the cloud) for consistent authentication of your users
Seamless authentication in SAP GUI and Fiori Launchpad with SAP Secure Login Service for SAP GUI and SAP IAS
Design of risk-based authentication mechanisms with your requirements and consulting of best-practice approaches from the industry
Device-independent single sign-on from on-premises client computers to BYOD – for seamless integration of all devices into single sign-on

We actively support you in the design and implementation of your single sign-on environment. Thanks to our experience from numerous projects, we know what is important and how you can quickly start productive operation.

Your contact person

Simon Toepper IBsolution

Simon Toepper

simon.toepper@ibsolution.com
+49 7131 2711-3000

More SAP Identity & Access Management solutions

SAP Identity Management

SAP Identity Management focuses on the traceable management and consistent distribution of digital identities throughout their lifecycle – assignment, repeated adjustments, deletion.

Learn more

SAP Cloud Identity

SAP Cloud Identity solutions enable authentication (IAS), single sign-on (SSO) and provisioning (IPS) against SAP cloud systems. Especially in hybrid system landscapes, they ensure complete integration.

Learn more

SAP Access Control

SAP Access Control is a product for identifying risks, minimizing risks, and automating workflows. The focus is on the traceable management and consistent distribution of users and authorizations throughout their lifecycle.

Learn more

Benefit from end-to-end authentication and centralized access data management

Simply complete the form and submit it. We are looking forward to your request!

A selection of our customers