SAP S/4HANA Cloud

SAP S/4HANA is an ERP suite that offers integrated applications supporting finance, supply chain, and operational data processing across core enterprise workflows.

Use Cases the Adapter Solves

• ERP Identity Visibility: Pull SAP S/4HANA business user accounts into Axonius to correlate ERP identities with your broader user inventory and detect accounts missing from other directories.
• Dormant Account Detection: Cross-reference SAP user validity periods and archiving indicators with HR and identity systems in Axonius to surface stale or orphaned ERP accounts.
• Compliance Reporting: Maintain an always-current inventory of SAP user records — including department, role, and personal information — to support access reviews and audit requirements.

Asset Types Fetched

• Users

Before You Begin

Required Ports

• TCP port 443 (HTTPS) — or the port configured on your SAP system for SOAP service access

Authentication Methods

Basic Authentication — credentials are passed as an Authorization: Basic header using a dedicated SAP user account with read access to the SOAP Business User service.

APIs

Axonius uses the SAP S/4HANA SOAP Business User service. The following operation is called:

• POST {host}:{port}/{soap-endpoint-path} with BusinessUserSimpleByElementsQuery_sync operation — fetch business user records with pagination via QueryHitsMaximumNumberValue, MoreHitsAvailableIndicator, and LastReturnedObjectID

The SOAP endpoint path is instance-specific and must be supplied when configuring the adapter connection. Example path used in development environments: /sap/bc/srt/xip/sap/querybusinessuserin/120/userinformation/query_dev

For details on the SAP S/4HANA Business User APIs, see the SAP S/4HANA Cloud API documentation.

Required Permissions

• A dedicated SAP user account with read access to the SOAP Business User service is required.
• The SOAP service must be active and accessible from the Axonius host on the configured port.

Supported From Version

Supported from Axonius version 6.0

Setting Up SAP S/4HANA to Work with Axonius

Please consult your SAP Basis administrator for instructions on:

1. Creating or identifying a service account with read access to the SOAP Business User query service.
2. Confirming the SOAP endpoint path for your environment (development and production paths may differ).
3. Ensuring the SAP SOAP service is active and the port is accessible from the Axonius host.

Connecting the Adapter in Axonius

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. Host Name or IP Address - The hostname or IP address of the SAP S/4HANA server. Example: https://sap.example.com
2. Port - The port used for the SOAP service connection.
3. User Name and Password - The credentials for a SAP user account that has permission to access the SOAP Business User service.
4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

Optional Parameters

1. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
2. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
3. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.