Note: This lab session includes laptops for attendee use, available on a first-come, first-served basis. 
You are welcome to bring your own device if preferred. Power is available at the tables. Please connect to the secure event Wi-Fi and test your browser before the session begins.
 

This hands-on lab explores a modern enterprise IAM (Intelligent Access Management) scenario spanning complex SAP and non-SAP landscapes. Participants will work through an identity lifecycle in which Microsoft Entra, ROI iAM running on SAP BTP, and SAP GRC Access Control are used together to provision access to Salesforce, from user creation and automated provisioning to AI-driven access requests and traceability across systems.

By attending, participants will learn how to:

• Enable Microsoft Entra to act as a central IAM for SAP and non-SAP applications.

• Create users in Microsoft Entra to trigger automated provisioning to SAP BTP applications.

• Configure identity lifecycle steps using ROI iAM as an access management accelerator for Entra.

• Submit self-service access requests for Salesforce using natural language with SAP Joule.

• Execute risk evaluation for non-SAP permissions using SAP GRC Access Control and review end-to-end traceability in Microsoft Entra and SAP Joule.

Capacity is limited to 50 participants. If the lab is full, please join the waitlist. Pre-registered attendees should arrive at least 10 minutes before the session to claim their seat. To ensure an on-time start, any unclaimed seats will be released to waitlisted attendees 5 minutes before the session begins. If you’ve preregistered and later decide not to attend, please remove the session from your agenda in the event app so your spot can be offered to the waitlist. Waitlisted attendees should monitor the event app on the day of the lab and be prepared to proceed to the room quickly if space becomes available. Note: To receive waitlist updates, be sure to enable networking and allow push notifications in the app.