connection between SailPoint and SAP

[SAPSupport]

Hi Team,

we would like to implement a direct connection from SailPoint and SAP (ECC and BW) to provision users in SAP : User creation, deactivation,…
Client has proposed the 2 options to establish the connection and further process(attached the screen shot for reference),
Option 1: is using Active Directory
Option 2: is using Azure Active Directory

Can you please help us with SAP notes and documents/any forums to establish the connection to SAP from Sailpoint and vise versa for the above 2 options.

Kindly let us know if any inputs are required

Regards,
Susmitha
------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Sailpoint is a Not a tool that is specific to GRC. It can be integrated with GRC.

Organizations who have invested in SAP GRC can leverage its’ ability to perform SoD checks and risk management assessments and use the GRC integration module to take remediation action or mitigation decisions within SAP GRC. For example, when a user * access to an SAP role, IdentityIQ will query SAP GRC and determine if the request creates an SoD conflict.

SAP GRC uses the SAP GRC Access Risk * * and Access Request Management (ARM) web services to perform the risk evaluation process.

Your initial query asked if it can be used for UAR and PER. There is no such official information available over that with us.

You can check the following links for some more inputs.

https://www.sailpoint.com/integrations/sap/

https://docs.sailpoint.com/wp-content/uploads/SailPoint-Govern-and-Secure-Access-SAP-Systems.pdf

https://community.sailpoint.com/t5/Connector-Directory/SAP-GRC-Integration-Module/ta-p/153262