Active Directory and SAP S/4 integration via BTP

[bastorino72]

Dear all
one of my customer is requesting me the possibility to interface is Active Directory with his SAP S/4. And he wants to create SAP users in a specific group in AC to be created in SAP S/4.
and even deleted or set to end of validity once the user went out of this AD group
there's a BTP service that allows this kind of scenario?

[dyaryura]

Hi 

The scenario you're describing is part of the scope of an IDM Solution. 

SAP is deprecating its SAP IDM solution and migrating to Microsoft (https://techcommunity.microsoft.com/t5/microsoft-entra-blog/sap-identity-management-to-microsoft-ent...)

you'll see some provisioning scenarios like your'e mentioning here:

https://learn.microsoft.com/en-us/entra/id-governance/scenarios/migrate-from-sap-idm#provision-to-sa...

You can also work with Cloud Identity Services and provision via IPS 

https://help.sap.com/docs/identity-provisioning/identity-provisioning/microsoft-active-directory

I'd suggest to go for EntraID as a Source since you'll get more features and possibilities in general.

The scenarios you're mentioning are probably feasible but will require implementation effort.