Access Control Solutions for SAP and other Business Applications

Martin Kuppinger

Description

Short Summary

Interesting Facts

Notable Quotes

Recommendations

Takeaways

This report provides an overview of the market for Access Control Tools for the emerging business application environments, encompassing SAP, but also a growing number of other business applications, and provides you with a compass to help you to find the solution that best meets your needs. We examine the market segment, vendor service functionality, relative market share, and innovative approaches to providing solutions that increase security in these business application environments for SAP and beyond, by restricting access, controlling break-glass access, and related capabilities.

SAP systems are integral to the IT infrastructure of many enterprises, handling critical business information and processes. Despite the presence of various other systems, well-protected SAP Systems remain a cornerstone, particularly for internal and external auditors. Ensuring robust risk and access management across these systems is vital. There is a trend toward shifting critical business systems to the cloud, expanding the need for centralized access controls beyond traditional SAP environments. Solutions must support a diverse range of systems and integration points, including SaaS applications.

This Leadership Compass focuses on solutions that manage access controls in both SAP and other business applications, noting that the landscape for business applications is evolving. The analysis covers a broad range of deployment models, emphasizing flexible and adaptable access management solutions. Vendor-specific highlights include extending support for non-SAP systems, leveraging AI and ML for enhanced analytics, and delivering integrated solutions across various environments and user interfaces.

The segment is expanding towards broader system support and enhanced capabilities for mitigating access-related risks. Deployment models include anything from traditional ABAP solutions to modern SaaS services, reflecting the shift from old paradigms to new standards. Vendors need to offer a comprehensive set of baseline and advanced capabilities, such as flexible deployment models, robust identity management, SoD controls, and emergency access management. Customer requirements and the diversity of their applications determine the best fit among various delivery models.

Leadership ratings categorize vendors into Overall Leaders, Product Leaders, Innovation Leaders, and Market Leaders. Solutions are analyzed based on their security, functionality, interoperability, usability, and deployment capabilities, with specific focus areas including support for SAP and non-SAP environments, entitlement and risk analytics, role and entitlement management, SoD controls, user lifecycle management, emergency access management, and advanced capabilities.