Simple identity and authentication management

With the feature Pack 2602 For SAP Business One 10.0, SAP is expanding its Identity and Authentication Management (IAM) with several features that will noticeably reduce the daily workload of administrators. The innovations concern the connection of Identity Provider users to company databases, the management of super-user rights, and the login flow. The goal: fewer clicks, less switching between tools, and more consistent settings.

What's new in the FP 2602

SAP is bundling several improvements to the IAM module in FP 2602. These include a new „Choose Company“ modal, the assignment of the Super User role directly during binding and during edit operations, a multi-select option for unbinding, and an adjusted display for tenants with long names. Furthermore, the system will now also show the Super User setting in the table of bound Company Users. Taken together, the changes have an effect in areas where administrators previously had to manually maintain the Super User setting in the Desktop Client after binding.

Set Super-User directly on binding

Previously, administrators had to maintain the super-user setting separately in the desktop client after binding an IDP user. This will no longer be necessary with FP 2602. The setting can now be assigned directly during the binding step, i.e., precisely when the user is assigned to a tenant. Subsequently, the super-user flag appears consistently in the Company Users table and is therefore available for unified validation across all tenants.

This becomes particularly relevant once an IDP user is linked to multiple tenants simultaneously. If the Super User settings differ between tenants, the system flags the discrepancy and offers three clearly named options: „Continue with Mixed Settings“, „Set Super User Across All Companies“, or „Remove it From All Companies“. This allows administrators to consciously decide whether to permit a mixed configuration or enforce a unified approach.

Unbinding and Edit Operation

The workflow is also streamlined when unbinding. New multi-select functionality allows an IDP user to be removed from multiple tenants in one step. Once there are no more bindings, the IDP user can be completely removed.

Additionally, there is a new edit option: This allows administrators to update the super-user setting for selected company users retrospectively, without having to go via the desktop client. A search and filter function in the company dropdown makes it easier to find the desired clients, especially in installations with many companies.

In the login flow, SAP is overhauling the „Choose Company“ selection. Long company names will now be displayed across three lines and supplemented with the database name, version, and localisation. This will allow companies whose names were previously cut off to be identified right from the login.

The selection itself also appears in tabular form with global search, sorting, and filters. The full client name remains visible below the selected entry, making the selection clearly traceable before the final login.

What that practically means for administrators

In summary, FP 2602 consolidates several previously separate steps into a central IAM interface. Administrators manage super-user rights where they onboard users anyway. They can immediately identify deviating settings across tenants and make documented decisions on their resolution. When removing access, they save clicks through multi-selection. Users, in turn, benefit from a clearer tenant selection during login, especially in environments with many or similarly named companies.

Overall, FP 2602 bundles the management of super-user rights, the detection of deviating settings across clients, multiple unbinding, and the revised client selection during login in the IAM interface – functions that reduce the administrative overhead in these areas and increase the consistency of super-user settings across clients.

SAP B1 blog