Move to a new user authentication service

As announced in July and in our latest monthly newsletter, we've modernized our authentication service to make user login more convenient and support a broader range of single sign-on (SSO) setups. A new self-service SSO configuration is now available.

Your benefits from the new service include:

• Modern authentication technologies, such as OpenID Connect (OIDC), to create a seamless user login experience by passing the user authentication from an identity and access management system to other applications.

• Configuration of multiple identity providers (IDPs) and single sign-on (SSO) solutions for different legal or regional entities of large organizations (e.g., one workspace with two different SSO configurations or one SAP LeanIX account with different SSO configurations for a live and a sandbox workspace.

• Change SSO configurations in self-service without contacting our support team.

Don't worry—nothing will change if you don't use an SSO solution for your workspace login (authentication with username and password). Additionally, if you were onboarded to SAP LeanIX after July 2025, you don't need to take any action, as we have already transitioned you to the new service.

If you leverage SSO, please activate and configure one of the two new service options: just authentication or authentication and authorization before May 15, 2026.

On the SAP Help portal, you can find configuration guides with examples for multiple identity providers such as Microsoft Entra ID and Okta.