FAQs on SAP BTP, IAS and SAP IAG
SAP Business Technology Platform (BTP) and other cloud applications from SAP are changing the way businesses use technology. Understanding how to work with SAP BTP, SAP Identity Authentication Service (IAS), and SAP Identity and Access
Governance (IAG) is essential. For security experts, knowing the answers to
common questions about these SAP solutions is not just helpful; it’s really important. In this Learning blog, we will look at the questions that people often ask about SAP BTP, SAP IAS, and SAP IAG. Whether you’re new to this or have been working with it for a while, these frequently asked questions will give you useful information. Join us as we explore the details of SAP security, providing a guide to help security experts stay on top of things in the ever-changing world of SAP.
1. Will SAP IAG replace SAP GRC? No, SAP IAG will not replace SAP GRC, despite having similar functionalities. SAP is, in fact, planning to release the next version of SAP GRC in 2026.
2. Can the client implement both SAP GRC and SAP IAG? Yes, it is possible for the client to implement both SAP GRC and SAP IAG. However, it’s important to note that SAP IAG is specifically required for on-prem GRC implementations to establish connections with cloud systems, including Ariba and Success Factors. This is referred to as IAG Bridge Scenario. Incase if the client has only on-premise systems, additional SAP IAG is not required.
3. If I have on-premise systems, can I still choose SAP IAG? Yes. SAP IAG supports both on-premise and Cloud systems.
4. Does IAG has all the capabilities of SAP GRC Access Control? Indeed, as previously highlighted, SAP GRC Access Control (AC) and SAP Identity Access Governance (IAG) are two distinct products. While they share certain
capabilities, each application comes with its own set of advantages and drawbacks. Despite their similarities, there exist many differences between the two.
5. Is SAP IAG a private cloud offering? Or a public cloud offering? SAP IAG is currently offered as a public cloud service. However, there is potential for SAP to introduce it as a private offering in the future.
6. What advantages IAG has over SAP GRC? As mentioned, each product possesses its own unique capabilities, making a direct apple-to-orange comparison between SAP IAG and SAP GRC impractical.
7. Is it mandatory to know SAP GRC for learning SAP IAG? Certainly, while it’s not an exact comparison, having knowledge in SAP GRC can be an added advantage when working with SAP IAG as the fundamentals remains same. It is easy for a SAP GRC consultant to learn and work in SAP IAG then a newbie.
8. Is it possible to integrate SAP IAG with SAP PC/RM? Currently it is not possible to integrate any other GRC application with SAP IAG.
9. What is SAP’s strategy on updating SAP IAG? SAP is consistently updating IAG with and adding various capabilities with it’s frequent releases. For the latest information on the IAG product roadmap, check the SAP Help document.
10. Do I need to know BTP security for supporting SAP IAG? It is good to have SAP BTP knowledge as User Management and Role assignments for SAP IAG must be performed from IAS. SAP IAS is not part of SAP Identity Services which is a service integrated with BTP.
11. What is Universal ID and how do I create one? Universal ID is also called as SAP Open ID. It’s the identity provider (user store) managed by SAP. New IDs can be created using the link – https://account.sap.com/core/create
For creating a BTP trail account, you would need a Universal ID. Refer to the below
link for a detailed walk-through: https://developers.sap.com/tutorials/hcp-createtrial-account.html
13. What is Default Identity Provider (IDP)? Default Identity Provider is setup automatically while the BTP account is created. It
uses the SAP User store. When the option is set to Default Identity provider, the user must use the SAP Open ID (Universal ID) to login to the application.
However, SAP recommends creating a corporate IDP once the BTP sub-account is set up. Root should remain on Default Identity Provider. Once the trust configuration is set up and established, you may create user IDs in IAS.
Contact us Level 2-4, 49, Shakthi Nilayam, Silicon Valley Society, Madhapur, Hyderabad 500084, India
