SAP Identity Manager 8.0 vs. SAP Cloud Identity Provisioning with SAP Cloud IAS

[former_member25156]

Dear Community -

In a scenario of deploying a Hybrid Landscape i.e. SAP S4HANA Finance / HR Payroll on premise, together with SuccessFactors EC, Recruiting, LMS and also products like Ariba, CONCUR, KRONOS cloud solutions. And also, the customer have never had an identity management or GRC System, I am wondering what the benefit is of using SAP IDM 8.0 as opposed to SAP Cloud Provisioning, since it now has a connector for On-Premise S4HANA systems via SAP Cloud Connector. If this is the only on-premise system to be included in the overall Identity Management strategy, does it not make sense to rather use the Cloud IPS and connect it to the on-prem environment for this one on-prem scenario?

Keep in mind that, in this instance, the customer has zero Identity Management solution, and uses Central User Admin for the existing ECC system.

My recommendation would be SAP Cloud Identity Provisioning, do you have any reasons why this cannot or should not be used as a strategy? Or why SAP IDM on-premise is really necessary in this envrionment.

Thank you,

[Colt]

Hi Roland, our blogs may help you as well to find out difference between SAP IDM and IPS: https://www.xiting.de/abgrenzung-sap-idm-ips-ias-teil1/

Cheers Colt

[ganesh_s7 · Accepted solution]

Hi Ronald,

The future direction of Identity and Access Management with SAP is SAP Cloud IAG Solutions (IPS, IAS and IAG). The right solution would depend on customer need. If the customer is new, it could be better to start with cloud solutions. SAP IPS in itself is a provisioning engine with transformation capability, end user authentication is provided by IAS; and end user interface (if required) is provided by IAG.

To keep in mind, SAP IDM 8.0 is more flexible and offers features not currently available (possibly in pipeline !) with cloud solution eg., Custom and Multi-Level approval, Custom Forms and Form Access Management, Tracing and Troubleshooting capabilities etc.

BR,

Ganesh S

[former_member25156 · Accepted solution]

Thank you - I am leaning towards SAP Cloud Identity products due to the fact that SAP IDM, even with its features, is only going to service SAP S4HANA, and SAP BW, whereas SAP Cloud Identity products, although not as feature rich, can connect to the entire landscape ( S4HANA OP, BW OP, SFSF EC, Ariba, Concur etc. )

Thank you for the feedback.

Best regards,