SAP Brief SAP Technology SAP Cloud Identity Objectives Simplify and Secure Cloud Access to Critical Business Data
Gain simplicity and security in a single cloud solution Gain simplicity and security in a single cloud solution The cloud offers new opportunities to connect with customers and partners and to empower employees beyond company boundaries. Yet traditional security tools like firewalls no longer offer enough protection given the growing multitude of cloud users and soaring volume of user-specific data. How can you ensure secure operations while offering easy cloud access to business data? While the large numbers of users in today s cloud environments call for simple, convenient authentication processes, corporate and legal policies demand secure operations. The SAP Cloud Identity offering helps you provide cloud-based business users with simple, secure access to your SAP and thirdparty applications that support critical processes such as human resource management, finance, and procurement. This comprehensive cloud service for identity lifecycle management provides state-of-the-art authentication mechanisms, secure single-signon functionality, and on-premise integration. It also features convenient self-services options that include registration and password reset for your employees, customers, and partners. The SAP Cloud Identity service simplifies and secures access to your business data, allowing you to control user access based on proven security standards. 2 / 8
The SAP Cloud Identity service simplifies the user experience in the cloud by providing single-sign-on capabilities. Employees, partners, and customers log in just once from anywhere and on any device to receive subsequent access to their authorized cloud and on-premise applications. Administrators gain one central entry point for configuring user management processes for all cloud-based applications. The service also centralizes account management tasks and supports identity federation. With all internal and external identities in one place, administration is more efficient, less error prone, and more secure. The SAP Cloud Identity service is based on trusted security standards. You can establish authentication and single-sign-on mechanisms with proven technologies such as the Security Assertion Markup Language (SAML). You can also connect several identity providers (IDPs) to set up a comprehensive network of identity checks tailored to your specific requirements. You can even customize identity-related interfaces and notifications to reflect your corporate design. For example, you can create account confirmation e-mails for customers, registration pages, sign-off prompts for data privacy and terms of use, social authentication, e-mail validation after registration, and user profile pages to match your company s look and feel. 3 / 8
The SAP Cloud Identity offering enables your cloud-based applications to comply with your corporate policies for security and identity management. It offers secure, streamlined single sign-on within the corporate network and across company boundaries. Hosted by SAP data centers around the world, the service delivers the full benefits of a highly secure, world-class hosting environment: superior availability, 24x7 support, and high data protection and privacy standards. Add in its low total cost of ownership (TCO) no hardware, support infrastructure, installation, or maintenance required and you get the ideal solution for reducing cost and freeing up resources to focus on high-value opportunities. Spend less time on operations and more on innovation by relying on the SAP Cloud Identity service. 4 / 8
Offer your customers convenient functionality such as self-registration and single sign-on while minimizing administrative efforts and maximizing security. Invite or register consumers on behalf of your business partners, and allow partners to request their own user accounts. Consumers, partners, and administrators authenticate just once and receive subsequent single-sign-on access to your cloud applications. You can invite customers and partners to utilize your applications and easily manage these users. The SAP Cloud Identity service offers user authentication without access to your corporate network, minimizing the risk and administrative overhead involved in managing customer-facing Web sites or portals. What s more, the service can even help you generate leads through the user registration process. You can adapt forms, messages, and e-mails to display your own corporate branding. And with options for customizing privacy and security policies, you can meet your corporate security requirements. A multitenant architecture that provides a separate tenant for each customer s data helps ensure a high standard of data privacy. 5 / 8
Allow your employees to access cloud and on-premise applications with one initial authentication from different locations. Combine corporate and external applications for example, an on-demand travel solution and an external booking engine to streamline cross-company process flows. You can integrate the SAP Cloud Identity service with SAP HANA Cloud Platform, allowing for a unified user experience. The service enables authentication and single sign-on for applications that are built with SAP HANA Cloud Platform and integrated with the SAP Identity Management component or other corporate identity management solutions based on Microsoft Active Directory. Simplify IT and empower employees to access the processes, tools, and data they need anytime, anywhere in a secure, cloud-based environment. 6 / 8
Combine easy access with high security in the cloud Combine easy access with high security in the cloud The SAP Cloud Identity service offers authentication and streamlined single-sign-on capabilities, as well as on-premise integration. With soaring numbers of users in cloudbased environments, you can trust the service to simplify and secure access to your business data using proven technologies such as SAML, OAuth, OpenID, or the Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO). Customizable branding brings a unified experience to internal and external users. The service also provides a unique opportunity for monitoring your users and their access to all connected applications. You can download reports on key factors such as the number of users who register for a Web site during a defined time period, the regions your users come from, the changes in user behavior following marketing campaigns, and the number of active users on a Web site. The SAP Cloud Identity service is hosted by SAP in highly secure data centers which means you can count on competent maintenance, high availability, and data privacy, as well as a low cost of ownership. Eliminate the trade-off between simplicity and security with the SAP Cloud Identity service. 7 / 8
www.sap.com Objectives Summary Now you can provide your employees, customers, and partners with simple and secure cloud-based access to the business processes, applications, and data they need. The SAP Cloud Identity offering provides state-of-theart authentication mechanisms, secure singlesign-on functionality, on-premise integration, and convenient self-service options. Objectives Simplify the user experience in a cloud environment Ensure the security of business data and applications in the cloud Streamline the management of cloudbased users and applications State-of-the-art authentication mechanisms Secure single-sign-on functionality On-premise integration Convenient self-service options Empower users to log on just once from anywhere, on any device and get subsequent access to all authorized applications Control user access based on trusted security standards Monitor users and their access to all connected applications Rely on secure SAP data centers to provide 24x7 support, high availability, data privacy, and low cost of ownership Learn more To find out more, call your SAP representative today or visit us online at www.sap.com. 8 / 8 Studio SAP 32845enUS (14/09)
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company. SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. Please see http://www.sap.com/corporate-en/legal/copyright/index.epx#trademark for additional trademark information and notices. Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors. National product specifications may vary. These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty. In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation, and SAP SE s or its affiliated companies strategy and possible future developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.