SAP Identity Authentication Service (IAS)

Leverage existing identity providers for secure authentication and benefit from native cloud application integration



Authenticate users securely

IBsolution Cloud

Ideally tailored to cloud landscapes


Additional measures for greater safety

Authentication in cloud system landscapes

SAP Identity Authentication (IAS) is available as a cloud service on SAP Business Technology Platform. This enables all user authentication requirements to be implemented in cloud system landscapes. The main advantage of SAP IAS is the native integration of cloud applications as target systems. This makes it much easier to connect cloud applications for authentication. The use of the SAML protocol for authentication enables flexible integration of identity providers such as Microsoft ADFS (Active Directory Federation Services) or Microsoft Azure AD.

SAP Identity Authentication Grafik englisch

SAP Identity Authentication can be used to implement different authentication solutions. However, the ideal solution is to implement single sign-on (SSO), which gives users secure access to all configured target systems with a single logon.


  • Integration of one or more identity providers

  • Single sign-on for connected cloud systems

  • Multi-factor authentication and risk-based access control for a higher level of security

Your contact person

Simon Toepper IBsolution

Simon Toepper

+49 7131 2711-3000

In the long term, SAP Identity Authentication will replace the on-premise solution SAP Single Sign-On. This is based on SAP NetWeaver technology, which is currently only supported until 2027. A major advantage of SAP IAS is the simple configuration within the cloud and in connection with cloud systems.

For additional security

Multi-factor authentication

To achieve a higher level of security, it is suitable to implement multi-factor authentication (MFA). This prompts the user to use another authentication factor when logging in, for example an RSA token or a code sent via SMS.

IAS Risk Based Authentication neu englisch

Risk Based Access Control

Another feature of SAP IAS is Risk Based Access Control. It offers the possibility to secure certain accesses in a special way based on specific characteristics. For example, access from a specific network (outside the corporate network) or access by a specific group of people (e.g., administrators).

One conceivable scenario could therefore be to activate single sign-on within the corporate network and to enforce multi-factor authentication for access from outside the corporate network in addition to single sign-on (see graphic).

The SAP Cloud Identity portfolio


SAP Identity Authentication (SAP IAS)

  • Single sign-on for browser-based applications (cloud and on-premise)

  • Different authentication options

  • Different user store integration scenarios


SAP Identity Provisioning (SAP IPS)

  • Cloud-based service for identity lifecycle management

  • Manage users, roles, and groups in cloud and hybrid landscapes

  • Based on the SCIM industry standard

SAP Cloud Identity Access Governance (SAP IAG)

  • Centralized management of risk and compliance for on-premise and cloud

  • Reduced role management complexity through streamlined design and governance

  • Policy-driven workflow processes for access management and certification

More information and offerings on SAP Identity Authentication (IAS)

Effectively securing cloud systems | IBsolution

From single sign-on to MFA: Effectively securing cloud systems

Moving away from on-premise systems to cloud applications – the system landscape of companies is in a state of transition. This poses immense challenges for processes and IT security.

Read more
Cloud single sign-on between SAP and Microsoft | IBsolution

Across borders: Cloud single sign-on between SAP and Microsoft

The integration between the Microsoft and SAP world poses great challenges for many companies. The different systems should not only communicate with each other, but also share, transfer and process data.

Read more
Starter Package for SAP Cloud Identity | IBsolution
Identity Management processes in the cloud

Starter Package for SAP Cloud Identity

Automate your Identity Management processes in the cloud. Use the new SAP Cloud Identity services (Identity Provisioning and Identity Authentication) to establish an interface for all your cloud systems.

Learn more

Would you like more information about SAP Identity Authentication (IAS)?

Simply complete the form and submit it. We will get back to you as soon as possible.

Further solutions for SAP Identity & Access Management

Identity Lifecycle Management | IBsolution

Identity Lifecycle Management

Identity lifecycle management is part of enterprise security and describes all processes for assigning roles and authorizations − from when an employee joins the company, through changing responsibilities or even department changes, to when he or she leaves.

Learn more
SAP Identity Management | IBsolution

SAP Identity Management

SAP Identity Management focuses on the traceable management and consistent distribution of digital identities throughout their lifecycle – assignment, repeated adjustments, deletion.

Learn more
SAP Single Sign-On | IBsolution

SAP Single Sign-On

SAP Single Sign-On enables end-to-end authentication against SAP and non-SAP applications. Central management of access data increases security, as only one user ID is required for all applications.

Learn more