Entra ID Governance vs Saviynt for SAP IGA Use Cases

Hi everyone,

We are currently evaluating Microsoft Entra ID Governance as a potential replacement for Saviynt for SAP-focused IGA requirements across a mixed SAP landscape, including:

• SAP SuccessFactors
• SAP Concur
• SAP S/4HANA Private Cloud
• Other SAP SaaS and enterprise applications

I wanted to get insights from anyone who has implemented or worked extensively with Entra Governance in SAP-centric environments, specifically around the following areas:

1. Birthright RBAC Provisioning

Can Entra Governance provision a single composite/business role (similar to Saviynt Enterprise Roles) through HR-driven JML events?

For example:

• HR event triggers provisioning
• User automatically receives bundled SAP access/business roles
• Role assignment follows birthright/access package logic

How mature/scalable is this approach in Entra compared to Saviynt?

2. SoD (Segregation of Duties) Capabilities

Saviynt supports preventative SoD checks directly during request submission, including SAP-specific SoD analysis.

Questions:

• Does Entra Governance support preventative SoD evaluation at request time?
• Can conflicts be surfaced before approval/provisioning?
• Is there native SAP SoD support or dependency on external tooling (for example SAP GRC/IAG)?

Additionally, Saviynt supports granular SAP authorization object analysis down to field-level min/max values within SAP Private Cloud environments.

Does Entra provide similar depth for SAP authorization analysis?

3. SAP Integrations / Connectors

While Entra provides OOTB Enterprise Applications and provisioning connectors for SAP applications:

• What differences or limitations have you observed compared to Saviynt’s SAP connectors?
• How well does Entra handle SAP role imports, entitlement hierarchy, and provisioning workflows?
• Any known gaps for SAP Private Cloud integrations?

Would appreciate any implementation experiences, architecture guidance, lessons learned, or recommendations from teams who have evaluated or deployed Entra Governance in SAP-heavy environments.

Thanks in advance.