What it means

  • System interactions should be seamless and intuitive to the end-user
  • System integrity relies upon effective user authentication and access permissions
  • Users should have unrestricted access only to information and functionality they require
  • Single sign-on requires trust and user mapping between systems, and a number of technical mechanisms are available for achieving this
  • Synchronisation of roles between systems ensures that users are presented with appropriate functionality only

Why IQX

  • IQX has deep understanding of both the SAP authorisation concept as well as Windows authentication mechanisms
  • We have expertise using the Kerberos protocol for authentication between systems
  • We understand the licensing implications of service-account based system integrations and direct end-user access to SAP functionality
  • We provide standard solutions for Single Sign On to SAP in both SharePoint and Microsoft Office contexts
  • We are experienced at dealing with authorisation restrictions, and designing elegant user interfaces that respond accordingly

Questions we can help you with

  • Who needs access to specific SAP authorisation objects?
  • What additional authorisations are required to allow users to access SAP functionality via Remote Function Calls?
  • How can we configure single sign-on if we don't have this enabled in SAP?
  • Where do we manage user mapping between Active Directory and SAP user accounts?
  • Which security mechanisms are most effective and easy to administer?
  • When do we use generic service accounts for accessing SAP functionality?
  • Can we consolidate our Windows and SAP roles?

Rest easy - your system is safe