sap product road map€¦ · · 2016-10-13template revision: 20160104 v4.1 sap product road map...

Template Revision: 20160104 v4.1

SAP Product Road Map SAP Identity Management

Road Map Revision: 2016.09.15 Customer

© 2016 SAP SE or an SAP affiliate company. All rights reserved. 3 This presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement

Customer

The information in this presentation is confidential and proprietary to SAP and may not be disclosed without the

permission of SAP. This presentation is not subject to your license agreement or any other service or subscription

agreement with SAP. SAP has no obligation to pursue any course of business outlined in this document or any related

presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation

and SAP's strategy and possible future developments, products and or platforms directions and functionality are all

subject to change and may be changed by SAP at any time for any reason without notice. The information in this

document is not a commitment, promise or legal obligation to deliver any material, code or functionality. This document

is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties

of merchantability, fitness for a particular purpose, or non-infringement. This document is for informational purposes

and may not be incorporated into a contract. SAP assumes no responsibility for errors or omissions in this document,

except if such damages were caused by SAP´s willful misconduct or gross negligence.

All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ

materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements,

which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

Legal disclaimer


Customer

Introduction to product road maps

Purpose

Product road maps are designed to support the product adoption planning activities of SAP customers. A product road map

helps a customer match short term and long term goals with technology plans.

A product road map describes how the feature / function capabilities in an SAP product or technology are planned to progress

over time, in general:

Today = changes in the current release version

Planned Innovations = changes planned in one or more upcoming development releases (up to 12-18 months).

Future Direction = proposed themes for a product or technology beyond the planned releases

Complementary resources

For a more general description of the business problems / processes being solved and supported by SAP, refer to Solution

Road maps.

For more detailed technical information please refer to the Product Availability Matrix, Ramp-up Knowledge Transfer materials

and product documentation.


Customer

Table of contents

Product Overview

Product description

Key trends and customer needs

Road map overview and major product updates

Product Road Map

Today

Planned

Future

Appendix

• Product description

• Key trends and customer needs

• Road map overview and major product updates

Product Overview


Customer

SAP Identity Management Product description

Use centralized software to lower risk and manage the full identity lifecycle of users. Keep operations running efficiently and

affordably, while protecting applications and data. Provide user access according to current business roles. Workflows and

user interface are highly flexible and configurable without the need for development skills

1. Lower IT support costs and reduce risk with centralized user identity

management across SAP, non-SAP, various IT and cloud solutions

2. Improve productivity with self-services such as automatic password resets

and rules-driven workflows

3. Improve insight and compliance with centralized, integrated logging and

reporting

4. Boost flexibility with standards-based functionality that integrates fully with

company processes


Customer

SAP Identity Management Compliant identity and access management

SAP

Identity Management SAP Access Control

Request role assignment 1

Forward

request for

risk analysis 3

Risk status 6 Provisioning to target systems 7

5 Risk

mitigation

SAP SCM

SAP ERP HCM

SAP ERP

Java

SAP HCP

Active Directory

Legacy

OS

E-mail

Web app

SAP applications Non-SAP applications

Portal …

Notification to user and manager 8

Manager approval 2

4 Risk

analysis

SAP SuccessFactors Database … …


Customer

SAP Business

Suite

SAP HANA Cloud Platform

SAP NetWeaver Application Server

SAP Access Control

SAP Identity Management

Make it simple for users to do what they are allowed to do

Know your users and what they can do

SAP Single Sign-On

Ensure corporate compliance to

regulatory requirements

Platform Security

Make sure that SAP solutions run securely

SAP Enterprise Threat Detection

Counter possible threats and identify attacks

Add-On for Code Vulnerability

Analysis

Find and correct vulnerabilities in customer

code

SAP HANA Cloud Platform Identity

Authentication

SAP HANA Cloud Platform Identity

Provisioning*

SAP Cloud Identity Access

Governance, access analysis

service

SAP Identity Management In the SAP security portfolio

Manage access,

users and

compliance in the

cloud

SAP HANA

3rd Party Systems

SAP S/4HANA

SAP Cloud Applications

* This is the current state of planning and may be changed by SAP at any time.


Today

Planned

Future

Product Road Map


Customer

This is the current state of planning and may be changed by SAP at any time.

Today Future Direction Planned Innovations

SAP Identity Management Product road map overview - key themes and capabilities

(Release 8.0, SP3)

Hybrid identity management

• SAP HANA Cloud Platform

• Identity lifecycle across on premise and cloud

Extend integration with SAP cloud services

for identity and access management

• identity authentication service

• identity provisioning service

• access analysis service

Integration

• SAP Ariba

• SAP Travel Management Solutions (a.k.a. Concur)

• SAP Hybris

• SAP Hybris Cloud for Customer

• SAP S/4HANA

Reporting enhancements

Rapid-Deployment Solution package

Identity, governance and administration

• Enhanced integration with SAP GRC to deliver an

identity, governance and administration suite

User Interface

• Extensions to the REST API

Enterprise readiness

• Installation with Software Provisioning Manager

• Further enhance ease of operations

Integration

• Hybrid deployment model: SAP cloud services for

identity and access management as extension for


• SAP HANA connector enhancements

• SAP SuccessFactors connector enhancements

• Connector Development Kit 2.0


• Full Identity lifecycle management

• REST API for SAPUI5

• Web user interface administration

• Dynamic roles management, user interface and

workflows

Eclipse based development environment

• Harmonization of development infrastructure

• Graphical workflow designer

• Configuration packaging and authorization concept

New SAP integration capabilities

• Full identity lifecycle covered with SAP

SuccessFactors integration

• SAP HANA connector

• Available on SAP Adaptive Server Enterprise

(ASE) database

• SAP Cloud Identity


Customer




(Release 8.0, SP3)









Integration

• SAP Ariba


• SAP Hybris


• SAP S/4HANA






User Interface





Integration












workflows










(ASE) database



Customer

SAP Identity Management Full identity lifecycle

Today

How long does it take for new

employees to receive all

permissions and become

productive in their new job?

Are permissions automatically

adjusted if someone is

promoted to a new position?

Who has adequate

permissions to fill in for a co-

worker? How long does it take to remove ALL

permissions of an employee? And

how can you ensure that they were

properly removed?

How can you remove

permissions automatically if

employees change their

position?


Customer

SAP Identity Management Various reporting options

Basic Reporting

Focus: Static, printable reports

Report creation on database level

Extended Reporting with SAP Business Warehouse (SAP BW)*

Focus: Dynamic reports, offering more, highly detailed, and

customizable reporting options

Data is extracted on a regular basis (as per defined job)

Predefined report templates available, custom reports can be defined

filtering, sorting, export to MS Excel, CSV, PDF, send via e-mail, etc.

Reporting with SAP BusinessObjects Lumira**

Focus: Customer-specific reports/analyses for identity management

Rich graphical capabilities for visualizing and utilizing reported data

Low integration and maintenance efforts

Easy extension

Change history

up to the time of

last synchronization

Today

* SAP BW is not part of the SAP Identity Management license

** SAP Lumira, desktop edition license is included


Customer

SAP Identity Management Dynamic roles management, user interface and workflows

Automated generated user interfaces, flexible workflows and

context based roles simplify adjustments based on changing

business requirements

Flexible workflows for permission requests

Automatic generated user interfaces

Creation and customization of user interface attributes

Automatic user interface structures

Context and rule based permission and role assignment

Reduction of business roles

Better usability for end users by requesting permissions

Unlimited role hierarchies

Today


Customer

SAP Identity Management Eclipse based development environment

New development authorization concept

UME based user access

Fine grained access controls

Multi-user environment

Harmonization of development

JavaScript language support

Revision-control

Development lifecycle

Graphical workflow design

Configuration package concept

Web user interface administration

Web-based management interface

Improved usability

Standardization

Today


Customer

SAP Identity Management Configuration packaging and authorization concept

SAP Identity Management delivers a framework and connectors as configuration

packages, allowing version and transport management and supporting different roles

managing the application

Configuration packages are now version controlled, logged and reversible

Easy to transport

Several developer users can work in parallel on different packages

Developer, administrators and support have various roles and authorizations

Today


Customer

SAP Identity Management SAP SuccessFactors integration

Line Manager

New hire, termination, change of

position etc.

Personnel action in HR

Event-based extraction

of personnel data

At relevant date

Based on organizational

data in HR automatic

role assignment

possible

Manager approves

the assignment

HR Operations


1

SAP

ERP

HCM

2 3 4

SAP

ERP

HCM

SAP

CRM

SAP

Portal

Provisioning of role and authorization

information to relevant target systems

5

Business process integration with SuccessFactors

Today


Customer

Today

SAP Identity Management SAP ASE database support

Database

NEW: SAP ASE IBM DB2

Microsoft SQL Server

Oracle

• SAP Identity Management running on SAP

software

• Optimized performance

• Based on SAP’s acquisition of Sybase with

many years of relational database

experience

• License advantages running all SAP

applications on SAP databases (SAP

HANA, SAP ASE, SAP IQ)


Customer

SAP Identity Management Integration with SAP HANA Cloud Platform Identity Authentication


On premise

Cloud

SAP HANA Cloud Platform

Identity Authentication

Today

Integration between SAP Identity Management and

SAP HANA Cloud Platform Identity Authentication

can provision users and enables access to cloud

applications

• Loading users and their attributes to and from SAP

HANA Cloud Platform Identity Authentication service

• Creating and updating users

• Setting a productive password for a user

• De-provisioning users


Customer




(Release 8.0, SP3)









Integration

• SAP Ariba


• SAP Hybris


• SAP S/4HANA






User Interface





Integration












workflows










(ASE) database



Customer

SAP Identity Management and SAP Access Control as a seamless

integrated identity, governance and administration solution

• Unified business role management

• Centralized audit of provisioning and governance processes

• Access Control as Business Role Modeling tool

• Identity Management provisioning to all connected systems

• Access Control manages authorization governance

SAP Identity Management Identity, governance and administration


Planned

Innovations

User interface

Roles

Audit

SAP Access Control



Customer

Supportability and monitoring

Provisioning monitor presenting workflows and processes execution

Analyzing potential erroneous situations

Proposals for forward actions for pending steps

Installing and updating with SAP SWPM* tools

SAP standard installation and update toolset usage

Automation of the manual steps

Post installation configuration simplification

Ensured integrity of all product components

SAP Identity Management Enterprise readiness – ease of operation

Planned

Innovations

This is the current state of planning and may be changed by SAP at any time. SAP SWPM = SAP Software Provisioning Manager


Customer


Integration


Planned

Innovations

New integration scenarios for on premise and cloud solutions

SAP cloud services for identity and access management

SAP HANA connector enhancements

SAP SuccessFactors connector enhancements

Connector Development Kit 2.0


Customer

Short project times

Reduced TCO

Simplify assignment and management of roles and privileges to

users

• Implement best practices out-of-the-box with a fixed scope, most

important and common scenarios, e.g. defined set of customer

specific configuration, connection of source and target systems,

provisioning, etc.

• Pre-configured functionality of SAP Identity Management in a

development system

• Step-by-step guide, describing each activity during deployment

• Solution can be extended with additional scope options

Scope option 1: Go-live support

Scope option 2: Connection to one additional SAP target system –

multiple scope options 2 for the connection of multiple additional

SAP target systems can be selected.

SAP Identity Management rapid-deployment solution Solution components and service approach

Scope option 1:

Additional Go-Live support

Scope option 2:

Connection to additional SAP systems

Standard solution

Connection of

1 source- and

2 target systems

Approval

workflows

Automatic

authorization

assignment

Mass user

administration

jobs

E-mail notification

framework

Support of system

specific attributes New web UI tasks

Predefined HTML

based reports

Enhanced error

handling

Planned

Innovations



Customer




(Release 8.0, SP3)









Integration

• SAP Ariba


• SAP Hybris


• SAP S/4HANA






User Interface





Integration












workflows










(ASE) database



Customer

SAP Identity Management Strategy


Future

Direction

SAP HANA Cloud Platform SAP Identity Management will integrate further

with new and innovative solutions

SAP Identity Management will support cloud

environments via an integration with SAP cloud

services for identity and access management or

direct via cloud connectors


Customer

Summary



On premise

Cloud

SAP cloud IAM services

Other cloud apps

SAP Identity Management is managing the full identity lifecycle to support

heterogeneous system landscapes. A recent enhancement is the design

time user interface based on Eclipse to configure and enhance the

solution. Furthermore there are new connectors for SAP landscapes

available and SAP Identity Management now also runs on the SAP ASE

database.

In the future SAP plans to improve the integration with SAP Access

Control, make it easy to install and operate and enable new

integrations with additional SAP solutions

The vision is an integrated and hybrid deployed security suite of SAP

Identity Management, SAP Access Control, SAP Cloud Identity Access

Governance services and SAP Single Sign-On to support customers IT

landscape strategy in the coming years


Customer

Key links for more information For customers and partners

Related roadmaps and key links

Road maps on SAP.com www.sap.com/roadmaps

SAP Single Sign-On

SAP Enterprise Threat Detection

SAP Solutions for Governance, Risk, and Compliance

(for SAP Access Control content)

SAP Community Network http://scn.sap.com/community/idm

http://scn.sap.com/community/security

http://scn.sap.com/community/sso

Where to go to provide product feedback and ideas

SAP Idea Place https://ideas.sap.com/SAPIDM

Influence programs http://service.sap.com/influence

SAP User Groups

http://www.sapusergroups.com/

http://www.sap.com/roadmaps

http://scn.sap.com/community/idm

http://scn.sap.com/community/sso

https://ideas.sap.com/SAPIDM

http://service.sap.com/influence

http://www.sapusergroups.com/


Customer

Acronym glossary

Acronym Full Text

SAP IdM SAP Identity Management

SAP GRC SAP Governance Risk and Compliance

SAP HCP SAP HANA Cloud Platform

SAP HCM SAP Human Capital Management

SAP ASE SAP Adaptive Server Enterprise, formerly SAP Sybase ASE

SAP SWPM SAP Software Provisioning Manager

SAP UI5 SAP UI5 is based on OpenUI5, an JavaScript application framework (open source project), designed to build cross-platform business applications

REST API Application Programming Interface (API) to the Representational State Transfer (REST), a web services programming paradigm


Customer

© 2016 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate

company) in Germany and other countries. Please see http://global12.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors.

National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its

affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and

services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as

constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop

or release any functionality mentioned therein. This document, or any related presentation, and SAP SE’s or its affiliated companies’ strategy and possible future

developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time

for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-

looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place

undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

http://global12.sap.com/corporate-en/legal/copyright/index.epx



sap product road map€¦ · · 2016-10-13template revision: 20160104 v4.1 sap product road map...

Documents