Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Sentinel provides a flexible platform that enables SAP and Microsoft partners to deliver integrated security solutions through the Microsoft Sentinel Content Hub.
Add-ons enable further correlational capabilities for the Microsoft Sentinel Solution for SAP applications. SAP signals are correlated with signals from other Microsoft and third-party solutions, enabling comprehensive threat detection and response across the entire IT landscape using the Microsoft unified Security Operations platform.
This article provides an overview of the partner ecosystem that builds upon and specializes in integration with the Microsoft Sentinel Solution for SAP applications.
Partner contributions
These solutions include ready-to-use connectors activating the Microsoft internal log streams such as AS ABAP Security Audit Log. Furthermore, specialized workbooks, dedicated analytics rules, and playbooks are provided.
Solutions provided by SAP as vendor
Choose from Microsoft Sentinel solution add-ons build by SAP for SAP.
| Name | Description | Azure Marketplace link |
|---|---|---|
| SAP Enterprise Threat Detection, cloud edition (ETD) | The SAP Enterprise Threat Detection, cloud edition (ETD) solution enables ingestion of security alerts from ETD into Microsoft Sentinel, supporting cross-correlation, alerting, and threat hunting. ETD supplies curated alerts from SAP ERP, SuccessFactors, Ariba, and other SAP SaaS applications. | Azure Marketplace |
| SAP LogServ (RISE), S/4HANA Cloud private edition | SAP LogServ is an SAP Enterprise Cloud Services (ECS) service aimed at collection, storage, forwarding, and access of logs. LogServ centralizes the logs from all systems, and ECS services used by a registered customer. Main Features include: Near real-time log collection with ability to integrate into Microsoft Sentinel. LogServ complements the existing SAP application layer capabilities of the Microsoft Sentinel Solutions for SAP. SAP LogServ includes logs like: SAP HANA database, AS JAVA, SAP Web Dispatcher, SAP Cloud Connector, Operating System, third-party Databases, Network, DNS, Proxy, Firewall, etc. | Azure Marketplace |
| SAP S/4HANA Cloud public edition (GROW) | The SAP S/4HANA Cloud Public Edition add-on for the Microsoft Sentinel Solution for SAP will collect logs from sources like the SAP S/4HANA cloud security audit log, detect threats, suspicious activities, illegitimate activities, and more | Azure Marketplace |
Solutions provided by specialized SAP security vendors
Add-ons streamline detection and response by translating SAP-specific risks into actionable insights using capabilities from Microsoft Sentinel Solution for SAP.
| Name | Description | Azure Marketplace link |
|---|---|---|
| Onapsis | Onapsis provides comprehensive SAP security and compliance solutions with native integration into Microsoft Sentinel Solution for SAP. Onapsis supports ABAP code scanning, vulnerability management, and real-time monitoring across SAP environments. | Azure Marketplace |
| Pathlock | Pathlock provides native SAP Threat Detection and Response for Microsoft Sentinel Solution for SAP, forwarding only security-relevant, context-enriched events from 70+ SAP log sources to enhance detection accuracy and streamline SOC operations. | Azure Marketplace |
| SecurityBridge | SecurityBridge provides advanced SAP security monitoring, threat detection, and compliance solutions with native integration into Microsoft Sentinel Solution for SAP and Microsoft Entra ID. Specialized in SAP vulnerability management, ABAP code scanning, and real-time security monitoring across SAP landscapes | Azure Marketplace |
Solutions provided by the community
Extension patterns available for the agentless data connector of the Microsoft Sentinel Solution for SAP applications enable individual enhancements and extended scope of the Microsoft provided solution. Customers, partners, and individual community members share their artifacts via this official repos.
Get started from the contribution guide or reach out via GitHub issues.
Implementation and managed services partners
Implementation and managed services partners apply above solutions in addition to your Sentinel solution for SAP applications and offer hands-on support. This involves helping set up the Microsoft Sentinel Solution for SAP and your chosen add-on, delivering managed Security Operations Center (SOC), compliance monitoring, and continuous improvement.
Discover partner solutions from the Azure marketplace or from the Microsoft Solution Partner finder.
| Partner | Azure Marketplace link |
|---|---|
| Delaware | Protecting SAP: 3 day workshop |
| EY | EY Application Threat Detection and Response Service for SAP (TDR) |
| IBM | IBM Threat Management with Microsoft’s SAP Threat Monitoring Solution for Microsoft Azure |
| PWC | Secure SAP on Microsoft Cloud |
Tip
You're a partner looking to expand your SAP Security offerings and get listed? Reach out to the Microsoft Sentinel for SAP team through GitHub issues.