Blog / Identity and security
A practical checklist for IAS and single sign-on
Ten steps we follow when connecting SAP Cloud Identity Services to Entra ID, Okta or Google.
ManbiTech, 08 Nov 2026
Single sign-on is usually the first project in a new SAP cloud landscape, and the one everything else depends on.
Before you start
Decide on one IAS tenant per landscape tier, agree on the user identifier (usually email or employee ID) and clean up duplicate users.
Setup
Configure the corporate identity provider as a conditional authentication source, map groups to SAP roles, and enable Identity Provisioning for automatic user creation.
Test and switch over
Test with a pilot group, keep an emergency admin account outside SSO, then switch applications one by one.
Need help with this?
Talk to one of our SAP consultants.