The world of security never stands still, and neither do we. In Q2 2026, we delivered enhancements to SAP Cloud Identity Services, including support for technical users, options to block and automatically delete inactive accounts in the Identity Directory, and automatic creation of Identity Provisioning tenants on SAP Cloud Identity for Neo tenants.

We also introduced a new graphical user interface for the Application Vulnerability Report (beta) for SAP BTP, accessible directly in the SAP BTP Cockpit. Explore all the details in our latest release recap!

SAP Cloud ALM’s authorization model is evolving: later this year, it will introduce fine-grained role templates and custom role collections, allowing enterprises to align access with their organizational structure.

Next comes a migration to SAP Cloud Identity Services Authorization Management Service (AMS) to enable

attribute-based authorization, culminating in full consolidation into SAP Cloud Identity Services for a single identity fabric across the SAP cloud portfolio – paving the way for SAP Joule integration and elevating authorization into a strategic enterprise capability.

The Application Vulnerability Report for SAP BTP is currently available as a beta service in the EU-10 region. While subscriptions are not yet available in other SAP BTP landscapes, the service's scanning scope has been expanded significantly. It now scans applications deployed across 42 Cloud Foundry landscapes worldwide – including regions in the United States, Asia Pacific & Japan, Brazil, and additional European regions beyond EU-10.

You can now configure SAP Cloud Identity Services to automatically block or delete users that were created but never signed in to an application, helping reduce inactive accounts and streamlining user lifecycle management. By tailoring inactivity rules for different user types, organizations can strike the perfect balance between security, compliance, and user experience.