
SAP Cloud Identity Access Governance
Identity and access management (IAM) software
Identity management software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if SAP Cloud Identity Access Governance and its alternatives fit your requirements.
EUR 1,625.00 per month
Small
Medium
Large
- Manufacturing
- Energy and utilities
- Banking and insurance
What is SAP Cloud Identity Access Governance
SAP Cloud Identity Access Governance is a cloud-based identity governance and administration (IGA) product used to manage user access, approvals, and compliance controls across SAP and non-SAP applications. It supports access request workflows, role and entitlement management, and access reviews (certifications) for internal users and, in some deployments, external identities. The product is typically used by IT security, IAM/IGA teams, and compliance stakeholders in organizations running SAP business applications and SAP BTP services. It is positioned to integrate with SAP’s identity services and SAP application authorization concepts while connecting to third-party systems through connectors and integrations.
Strong fit for SAP landscapes
The product aligns with SAP application authorization models and common SAP enterprise identity patterns. It is designed to work with SAP’s broader identity services, which can reduce integration effort for organizations standardizing on SAP. This can be advantageous when governance requirements span multiple SAP business applications and SAP cloud services.
Governance workflows and reviews
It provides structured access request and approval workflows, helping organizations document who approved access and when. It supports periodic access reviews/certifications to validate that users retain appropriate entitlements. These capabilities address common audit and compliance requirements in regulated environments.
Centralized role and entitlement visibility
The product consolidates access data to improve visibility into roles, entitlements, and assignments across connected systems. It supports policy-driven controls and reporting that help identify over-provisioning and access exceptions. Centralization can simplify operational processes for IAM teams managing multiple applications.
SAP-centric design assumptions
Organizations with limited SAP footprint may find the product’s strongest value tied to SAP-specific integrations and authorization concepts. Non-SAP application coverage depends on available connectors and integration work. In heterogeneous environments, teams may need additional tooling or custom integration to achieve uniform governance across all apps.
Implementation and data modeling effort
IGA deployments typically require careful role engineering, entitlement mapping, and workflow design, and this product is no exception. Time-to-value can be affected by the complexity of existing access models and the number of target systems. Ongoing maintenance is often needed to keep roles, connectors, and review scopes current.
Licensing and packaging complexity
SAP identity products are often purchased and deployed as part of broader SAP cloud and security portfolios, which can make cost and scope comparisons less straightforward. Feature availability may vary by edition, contract, or bundled services. Buyers may need detailed scoping to avoid gaps between governance requirements and licensed capabilities.
Plan & Pricing
| Plan | Price | Key features & notes |
|---|---|---|
| SAP Cloud Identity Access Governance — Standard edition | EUR 7,830.00 per month (in blocks of 1,000 resources) | Includes one production tenant + one test tenant for Cloud Identity Access Governance, and one production tenant for SAP Business Technology Platform (if not already in place). Metric: priced by blocks of 1,000 resources. Contract duration: 3 to 60 months. Payment: invoice supported; credit-card availability depends on country. Source shows monthly price on SAP product page. |
| SAP Cloud Identity Access Governance — Integration edition | EUR 1,625.00 per month (in blocks of 1 Connection) | Includes: access risk analysis (full version), user provisioning fulfillment (without full access request workflow), role management (creation/editing/importing of business roles — excludes automated candidate role design), one production + one test tenant for IAG, one production tenant for SAP BTP. Not included: privileged access management, access certification, audit log reporting. Contract duration: 1 to 3 years. Payment: invoice supported; credit-card availability depends on country. |
| Cloud test and demo for SAP Identity Access Governance (partner-only) | Configure to see price / price not shown | Non-productive, non-commercial tenant for test and demo purposes only; exclusively available for partners. In blocks of 1 Entitlements Package. Minimum contract: 3 months. |
Seller details
SAP SE
Walldorf, Germany
1972
Public
https://www.sap.com/
https://x.com/SAP
https://www.linkedin.com/company/sap/


