Forum Discussion
Entra ID Governance vs Saviynt for SAP IGA Use Cases
Hi everyone, We are currently evaluating Microsoft Entra ID Governance as a potential replacement for Saviynt for SAP-focused IGA requirements across a mixed SAP landscape, including: SAP SuccessF...
Lucaraheller thank you so much for the detailed reponses. A key follow-up based on SOD considering a hybrid IAM solution where Entra does IGA (birthright provisioning to CIS + access request) and Saviynt does SOD for its depth capabilities:
- Can Entra invoke or poll a third-party IAM platform (e.g., Saviynt) during the access request process to perform a preventative SoD check before provisioning?
- If Saviynt performs the deep SoD analysis, does that imply the request catalog/ruleset in Entra would also need to differ, given Entra is primarily requesting CIS groups rather than application entitlements?
Yes, Entra can integrate with Saviynt through custom extensions/Logic Apps, but Saviynt should remain the authoritative SoD decision point for deep SAP risk analysis. And yes, the Entra request catalog should be intentionally modeled around the same business roles or risk-relevant bundles that Saviynt evaluates, rather than using broad CIS groups that hide the underlying SAP entitlement risk.