By 2027, SAP Identity Management reaches end of maintenance in the same window as the S/4HANA migration deadline — and a new class of non-human identity, the AI agent, is already operating inside SAP landscapes faster than governance can keep up. Identity First is the engineering reference for closing that gap.
Written by a practising SAP security architect, this book moves from architecture to execution across 22 chapters and a T-SQL reference appendix: SAP IdM 8.2 and GRC 2026 architecture, JavaScript rule and workflow engineering, access risk analysis, business role and emergency access management, the non-human identity crisis, agentic AI governance for Joule and AI workflows, SAP BTP Zero Trust, S/4HANA authorisations, compliance engineering, third-party IAM integration, and the AI-native security operating model organisations will need by 2027 and beyond.
You will learn to:
? Architect and rebuild SAP identity repositories, provisioning rules, and workflow engines rather than lift-and-shift historical role debt into S/4HANA
? Govern AI agents as first-class non-human identities — discover, classify, enforce, and monitor them before they become the next audit finding
? Close cross-system Segregation of Duties blind spots that agentic workflows create across Financials, Supply Chain, and HR
? Map real vulnerabilities (including CVE-2026-0504) and modern cloud-native IGA migration patterns to a concrete 2027 decision timeline
? Translate identity architecture from a technical backlog item into a board-level, program-level decision
Whether you're an SAP security architect, IAM engineer, GRC lead, or CISO sponsoring the 2027 migration, this is a hands-on, engineering-depth playbook for building identity governance the AI-native SAP enterprise can actually run on.
Practical. Technical. Built for the 2027 deadline.
