SAP BTP and IAG Security
https://youtu.be/5Bb7EmmFu9U
SAP Cloud Identity and Access Governance (IAG) including BTP Security Duration: 1.5 Months
https://youtu.be/5Bb7EmmFu9U?si=N7WuSLDMQ5O1XHMj
https://youtu.be/0ld8YMJLgpI?si=WCyuZWiV-D2cc6fs
https://youtu.be/vN3DounZtPU?si=zyuFD-75r8Y_ZIJe
Unit 1: Introduction of SAP Cloud Identity and Access Governance
- Introduction for SAP Cloud and Identity and Access Governance
- Challenge and solution for Security and Governance
- Architecture of SAP Cloud IAG
- Comparison of SAP IAG and SAP GRC
- Security and authorization
Unit 2: SAP Cloud Platform (BTP)
- Overview for SAP BTP
- SAP BTP Security
- Directory concept in BTP
- Subaccount concept in BTP
- Managing users and authorisations
- Subscription request and validation
- How to create user creation in BTP
- How to create roles in BTP
- Role collections and assignment of roles to users
Unit 3: SAP Cloud Identity authentication service (IAS) – overview
- SAP IAS Overview
- Difference between IAS, IPS and IAG
- How to Setup the trust relation between IAS and IAG
- Integration IAS with IAG
- IAG group maintenance in IAS and Assertion configuration
Unit 4: SAP IAG integration with on premise systems SAP GRC
- Integration of on premise system with Cloud Connector
- Add system connection with HTTP connection
- Add system connection with RFC connection
- System/ Communication user in Satellite system
- Create destination in BTP system
- Synchronization jobs details in IAG and purpose
- How to schedule and read the sync job details
Unit 5: SAP IAG integration with Cloud systems -overview
- Introduction for SAP Identity Provisioning services IPS
- Integration of IPS with SAP IAG
- IPS Proxy system configuration and steps
- Integration of cloud system with IPS
- Integration of IAG with Cloud system
Unit 6: Master data setup in SAP IAG
- Define business process, sub-process and function
- Application
- Segregation of tasks
Unit 7: IAG repository, sync Jobs and Job overview
- Group BFG and other information
- Sync objects form target system to IAG system repository
- Scheduling a job and overview of background Job
Unit 8: Access Analysis service
- Process – Analyze àRefine->Mitigate->Monitor
- Master data setup for AAS
- Risk ruleset upload by SAP
- Risk ruleset validation
- User risk analysis
- Custom risk ruleset update
- Mitigation control configuration
- Dashboard analysis
- Risk score policy
- Access refinement
- Shortcoming of IAG compare to SAP GRC
Unit 9: Role Designer in SAP IAG
- Master data setup for role designer
- Repository sync form target system
- Role owner creation and access assignment
- Access maintenance in IAG
- Business role creation in SAP IAG
- Candidate business role (CBR) creation overview
- CBR simulation and creation
- Shortcoming of IAG role designer compare with SAP GRC AC BRM
Unit 10: Access Request Management in SAP IAG
- Master data setup for ARM
- Business rule for workflow upload by SAP
- Workflow configuration and customization
- Custom field setup
- Access assignment for different type of owners
- Access request workflow process
- Audit trail analysis
- ARM Jobs and job overview
- Limitation of IAG with SAP GRC AC access request management
Unit 11: Access Certification in SAP IAG
- Planning Periodic review for User’s access
- Access certification configuration
- Starting complain for access certification
- Monitoring periodic review
Unit 12: SAP IAG Privilege access management
- Introduction of Privilege access management in SAP IAG
- Configuration of privilege access management
- Report and Monitoring of privilege access management
Unit 13: SAP IAG Bridge concepts – Overview
- Introduction of SAP IAG bridge
- Comparison of SAP IAG bridge with SAP GRC
- SAP Cloud connector overview
- Integration with SAP GRC AC
Unit 14: SAP IAG Reporting Service