SAP Analytics Cloud (SAC) does not provide a native, built-in feature for IP-based whitelist or IP access control at application level. However, IP control can be effectively implemented through Identity Provider (IdP) integration.
IP Control via IdP and SSO Integration
In most customer environments, SAC is integrated with the customer’s existing SSO infrastructure by connecting to an external IdP.
When SAC is accessed through such an SSO setup:
IP-based access restrictions can be enforced at the IdP or SSO system levelThis allows customers to control which IP ranges or network zones are permitted to authenticate and access SACAs a result, while SAC itself does not perform IP filtering, IP access control is commonly achieved through the customer’s identity and authentication layer, which aligns well with enterprise security architectures.
IP Range Characteristics
IP ranges used by SAP data centers are fixed (End point)The specific IP range depends on the data center region where the SAC tenant is hostedCustomers can identify and validate the relevant IP ranges based on the tenant’s regional deployment
SAP provides an official and up-to-date reference for these IP ranges and endpoints, which can be found here:
Â
Â
​ SAP Analytics Cloud (SAC) does not provide a native, built-in feature for IP-based whitelist or IP access control at application level. However, IP control can be effectively implemented through Identity Provider (IdP) integration.IP Control via IdP and SSO IntegrationIn most customer environments, SAC is integrated with the customer’s existing SSO infrastructure by connecting to an external IdP.When SAC is accessed through such an SSO setup:IP-based access restrictions can be enforced at the IdP or SSO system levelThis allows customers to control which IP ranges or network zones are permitted to authenticate and access SACAs a result, while SAC itself does not perform IP filtering, IP access control is commonly achieved through the customer’s identity and authentication layer, which aligns well with enterprise security architectures.IP Range CharacteristicsIP ranges used by SAP data centers are fixed (End point)The specific IP range depends on the data center region where the SAC tenant is hostedCustomers can identify and validate the relevant IP ranges based on the tenant’s regional deploymentSAP provides an official and up-to-date reference for these IP ranges and endpoints, which can be found here:https://help.sap.com/docs/btp/sap-business-technology-platform/regions-and-api-endpoints-available-for-cloud-foundry-environment    Read More Technology Blog Posts by SAP articlesÂ
#SAP
#SAPTechnologyblog