A practical SAP BTP security guide: account and subaccount design, role collections and IdP group mapping, SAP Cloud Identity Services, Cloud Connector hardening, destinations, and audit logging.
Why publishing an SAP Fiori front-end server behind a Web Dispatcher is the wrong external-access design: what the ICF service tree exposes, what ICMAD and CVE-2025-31324 prove about pre-authentication reachability, and the layered architecture that keeps the ICM unreachable.
A practical guide to SAP platform cybersecurity beyond authorizations: SAP Security Notes and patching, system hardening, gateway and RFC security (UCON), secure communication (SNC), and monitoring with the Security Audit Log.
A consultant's guide to SAP GRC Access Control: the ARA, ARM, BRM and EAM components, how they fit together, common implementation pitfalls, and when a full GRC deployment is justified versus a lighter alternative.
Meylan Technologies & Consulting