Jul 1, 2026
•3 minute read
SAP Access Control
When One Transaction Code Becomes Eleven: ToggleNow’s Case for Fixing SAP Access at the RequestAsk an SAP security team where access risk gets created and most point at the review. ToggleNow points earlier, at the request itself, where one read-only ask can quietly deliver eleven transactions, three SoD conflicts, and a five-fold license jump. Here is the case for three checks before you assign the role.
SAP Security and GRC Face an Execution ChallengeMindFore CEO Laxman Bolineni says SAP security and GRC have moved closer to SAP strategy, but customers now face a harder execution challenge as access control, cloud applications, SAP BTP, identity services, and global delivery models reshape governance.
May 12, 2026
•4 minute read
Simplifying SAP Security Management with the Xiting Security Platform (XSP)Xiting has launched the Xiting Security Platform (XSP), a cloud-based solution that transforms SAP security management by offering centralized identity management, real-time threat detection, cross-system risk analysis, and license optimization, helping businesses streamline their security operations and respond effectively to evolving cybersecurity threats.
Jan 28, 2025
•4 minute read
Unlocking the Real Power of SAP GRC Access Control Solution with VASPP Add-OnsSAP’s GRC Access Control solution is a widely recognized tool for efficiently managing user access to SAP applications. It offers a wide range of capabilities for managing user access, including automated access provisioning, access request workflows, and risk analysis along with access management automation. The solution is also capable of enforcing segregation of duties (SoD) policies to ensure that users do not have conflicting access privileges. But while the tool offers a comprehensive set of reporting and auditing capabilities and is an essential tool for any organization that requires a secure and efficient way to manage user access to their SAP systems, it is also a complex solution that requires significant expertise and experience to set up and maintain.
This article focuses on VASPP's suite of innovative GRC add-ons to address some of the challenges associated with traditional GRC Access Control solutions. These add-ons provide organizations with more ergonomic and user-friendly interfaces and make it easier for end-users to submit access requests and manage their access rights. The add-ons offer a modern web cockpit that streamlines the access request process and provides a more intuitive interface that requires less technical knowledge.
Jul 7, 2023
•7 minute read
SAP Cloud Identity Access Governance (IAG) – A PrimerSAP Cloud Identity Access Governance (IAG) is a cloud-driven solution designed to facilitate organizations in controlling access to vital business software and data. It forms a component of the SAP Business Technology Platform (BTP), offering a multitude of cloud services and solutions adaptable to businesses of different scales. With SAP Cloud IAG, companies can efficiently govern access to their SAP and non-SAP applications and their cloud and on-premise systems, all through a unified, centralized platform. While SAP Cloud IAG offers functionalities akin to SAP Access Control, which is part of SAP's GRC solutions, it is not intended as a replacement. Instead, it enriches Identity and Access Management (IAM) in complex cloud and on-premise settings and enhances compliance procedures with a user-friendly, dashboard-oriented interface, alongside a streamlined cloud experience.
The first in the series of articles on SAP Cloud Identity Access Governance (IAG) explores the key features and benefits of SAP Cloud IAG. Each article in the series will provide valuable insights and guidance for organizations who are looking for real-world case studies of successful implementations and best practices for implementation and customization.
Jun 27, 2023
•4 minute read
SAP Security and the Provisioning of SAP AccessThis article highlights the evolution of SAP security, access control (GRC), and IAM solutions, and discusses how organizations can choose the right solution for their needs, including a hybrid model. The article emphasizes the importance of collaboration between SAP security and cyber teams and encourages readers to consider their organization's needs, business objectives, SAP footprint, and risk management priorities before making a decision.
May 10, 2023
•1 minute read
Automating Access Governance in a Cloud-Based LandscapeAccording to our research, the most popular GRC solution being used by the SAPinsider Community is SAP Access Control. And yet more than half (63%) said that their current GRC solutions do not meet the need to effectively handle risk analysis and mitigation for cloud-based products without some sort of connector or bridge to a cloud-based access governance solution. As a result, most members of the SAPinsider Community now need to reassess how to manage access governance, risk, and compliance, and align their GRC strategies with their long-term enterprise technology strategies.
Read this article, which appears in the 2020 Q3 issue of SAPinsider Magazine, to learn:
- Top drivers impacting companies’ GRC strategies
- Three scenarios that can help you take a proactive approach to addressing governance, risk, and compliance needs for SAP S/4HANA in a cloud-based landscape
- Key steps for executing your company’s GRC strategy
Aug 21, 2020
•6 minute read
Pfizer Standardizes Process Controls and Moves to Continuous Remote AuditsThis case study explains how the Manual Control Performance (MCP) capability in SAP Process Control empowered Pfizer, an American multinational pharmaceuticals company headquartered in New York City with approximately 88,300 employees worldwide, to standardize controls across all sites, centralize, control performance, and perform continuous control monitoring (CCM).
Apr 20, 2020
•4 minute read
Brighthouse Financial Accelerates User Provisioning CyclesBefore integrating Saviynt’s Identity Governance and Administration (IGA) solution and SAP Access Control, Brighthouse Financial ran an entirely manual user provisioning process using an access request feature in SharePoint. This case study explains how the Fortune 500 company improved their user provisioning processes for SAP products with SAP Access Control and then implemented Saviynt’s IGA solution to integrate the processes with non-SAP applications.
Apr 17, 2020
•4 minute read
Events
SAPinsider Summit Philadelphia 2026Philadelphia, PA, United States
SAPinsider Summit New Orleans 2026New Orleans, Louisiana, United States
SAPinsider Summit Chicago 2026Chicago, IL
SAPinsider Copenhagen 2026Copenhagen, Denmark
