SAP's New Identity and Access Management Strategy: IAS + AMS vs XSUAA

SAP is modernizing its identity and access management by moving away from XSUAA and recommending the newer combination of IAS and AMS. These services offer a centralized, scalable approach for authentication and authorization, replacing the need for separate role definitions and tokens. The switch simplifies security on SAP BTP, allowing for seamless login and authorization across environments.

SAP is modernizing its identity and access management (IAM) strategy by shifting away from the XSUAA model and embracing a combination of Identity Authentication Service (IAS) and Authorization Management Service (AMS). This transition aims to provide a centralized, scalable approach to authentication and authorization, simplifying security on SAP Business Technology Platform (BTP) and enabling seamless login and authorization across various environments.

The new IAM solution simplifies security by consolidating role definitions and tokens into a single, more manageable system. This change is particularly beneficial for SAP BTP users, as it eliminates the need for separate role definitions and tokens, streamlining the login and authorization process. By centralizing these functions, SAP aims to enhance security and improve the overall user experience.

Resolve Tech Solutions, a leading provider of SAP solutions and services, has been named a top provider in the SAP Business Application Services PEAK Matrix by Everest Group [1]. The company offers a comprehensive SAP portfolio that includes services such as SAP Assessment & Advisory, SAP S/4HANA Implementation Services, and SAP Business Technology Platform (BTP) Services. Through its expertise in SAP IAM, Resolve Tech Solutions can help organizations navigate this transition and leverage the benefits of the new IAS and AMS combination.

In addition to simplifying security, the transition to IAS and AMS aligns with SAP's broader strategy to enhance data protection and compliance. By centralizing authentication and authorization, SAP can better monitor and control access to sensitive business data, reducing the risk of unauthorized access and data breaches. This shift also supports SAP's commitment to providing robust security measures for its enterprise resource planning (ERP) solutions, such as SAP S/4HANA.

As companies face increasing pressure to adapt to shifting markets and rising customer expectations, the move to IAS and AMS offers a more efficient and secure way to manage identity and access. By simplifying the IAM process, SAP enables organizations to focus on their core business functions while ensuring that their digital assets are protected.

References

[1] https://www.bizjournals.com/houston/news/2025/08/01/resolve-tech-solutions-sap-business-application.html