Turn your SAP BTP identity policy into precise, enforceable rules for authentication, authorization, and access lifecycle.
Identity is where most cloud risk concentrates. This standard makes your SAP BTP identity and access requirements specific and checkable — from trust configuration to token lifetimes.
It covers IAS/IPS and corporate IdP federation, XSUAA role collections and role templates, MFA and privileged access, provisioning and deprovisioning, segregation of duties, and periodic access review — each as a concrete requirement with clear ownership.
It is grounded in the SAP BTP Secure Configuration Baseline and mapped to NIST SP 800-63B, NIST SP 800-53, ISO/IEC 27001, and CSA CCM, so every requirement stands up to audit.
What this replaces
- Inconsistent, subaccount-by-subaccount interpretations of least privilege
- Generic IAM checklists that don’t understand IAS, XSUAA, and role collections
- Weeks of a specialist authoring your BTP identity standard from scratch
What you get
- A configurable Microsoft Word standard — fully editable, professionally formatted, and ready to adopt:
- 17 enforceable requirement areas plus framework alignment across the BTP identity surface
- A BTP segregation-of-duties conflict ruleset — rated administrative and role-collection conflicts, each with its business risk and required mitigation
- Named authorization-design patterns and a privileged role-collection reference list
- Object classification and naming for role collections, role templates, and user types
- A privileged-access, MFA, and access-review model with an access validation checklist
- Bracketed placeholders ([Control Frequency], [Session Timeout Period], [Inactivity Period]) to fit your policy
- Both Organization and Consultancy license editions