SAP Cloud Identity and Access Governance (IAG) Corporate Training
Run access governance on SAP Cloud Identity with guided labs on requests, roles, and SoD.
Edstellar, a corporate training company, delivers corporate training that helps your team run identity and access governance on SAP Cloud Identity. Employees design access request workflows, model business roles, manage segregation of duties, and run certification campaigns through guided labs led by practitioners. Each session is tuned to your SAP landscape and identity stores.
Instructor-led group trainingVirtual / on-site / off-site10 languagesDelivered inEnglish, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian100+ countriesWe have delivered inUnited States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
How we build How we build an identity-governed enterprise team
EDSTELLAR IDENTITY GOVERNANCE CAPABILITY MODEL
Assess identity governance maturity
Skill checks map your team's access governance, role design, and SoD baseline.
Set shared governance standards
One shared playbook for access requests, approvals, and certifications.
Practice in guided labs
Labs cover request workflows, role design, SoD analysis, and campaigns.
Measure the lift
Lab reviews benchmark each learner's IAG capability against checklists.
Scale across teams
One standard rolls out across tenants, regions, and business units.
Need more than one program?Get a group quote
Trusted as a Leading Corporate Training Provider by
Program Overview: What is SAP Cloud Identity and Access Governance (IAG)?
SAP Cloud Identity & Access Governance (IAG) is Edstellar's instructor-led program for identity and access teams governing SAP Cloud Identity. It covers IAG foundations, Cloud Identity configuration, access request and approval workflows, role design and segregation of duties, and access certification and lifecycle provisioning. Participants learn to run enterprise identity governance that auditors trust.
Training is lab-driven from the first module, with guided exercises in SAP Cloud Identity. Participants configure identity services, design roles, build approval workflows, run certification campaigns, and automate lifecycle provisioning. Instructors coach on governance discipline, reviewing each design for the SoD conflicts auditors hunt and the approval gaps users exploit. The final five hours are a capstone: build a complete enterprise IAG program.
Access sprawl is a quiet crisis: orphaned accounts, toxic role combinations, and approvals nobody remembers granting. When auditors arrive, the evidence is missing. This program teaches teams to govern access as a lifecycle: designed roles, enforced segregation, certified access, and provisioning that follows the employee.
The capstone is an Enterprise IAG Program Build: your team stands up a working governance program, configured identity services, SoD-clean roles, approval workflows, and a certification campaign, on a realistic enterprise scenario. Instructors audit it the way external assessors do, and the team leaves with the role designs, workflow definitions, and certification playbook they built.
Six modules and 24 hours: IAG foundations, SAP Cloud Identity configuration, access request workflows, role design and SoD, certification and provisioning, and a capstone IAG program build. Every module pairs concepts with a guided lab in a demo tenant, so each technique is practiced. Sessions end with an audit-ready governance program your team designs together.
What's Included in this Workshop for Your Enterprise Teams
- 1
IAG workflow labs
Build request catalogs and multi-stage approval workflows.
- 2
Role and SoD labs
Model business roles and run segregation-of-duties analysis.
- 3
Certification labs
Launch campaigns and process reviewer decisions.
- Instructor-led delivery across virtual, onsite, and hybrid
- Guided labs in every module with instructor coaching
- Capstone IAG program build, reviewed with your team
- Flexible scheduling around your calendar
- Lab guides and reusable templates included
- Group size and batches set along with you
Build your team's skills. Anywhere in the world.
Real-world use cases
from day one
Instructor-led training
for your teams
Delivered globally
in 100+ countries
Enterprise Training Solutions Customized for Your Company
One partner for instructor-led corporate training, delivered the way your teams work.
Request a Training Quote- Customized Training Delivery
- Scale Your Training: Small to Large Teams
- In-person Onsite, Live Virtual or Hybrid Training Modes
- Plan from 2000+ Industry-ready Training Programs
- Hands-On Labs on Live Infrastructure, Led by Industry Experts
SAP Cloud Identity and Access Governance (IAG) Course Topics and Program Outline
A tailored 24-hour, six-module workshop: one learning journey from IAG foundations to a capstone governance program build. Sessions pair concepts with labs on real-world use cases. Materials include lab guides and templates, plus a capstone assessment.
Built by Edstellar with identity governance practitioners
Built by practitioners who run SAP Cloud Identity and access governance programs in production, shaped around your SAP landscape and use cases.
Skill checks baseline your team's identity administration, role design, and SoD familiarity before training begins.
Live instruction covers IAG foundations and SAP Cloud Identity configuration across 6.5 focused hours.
Guided labs build request workflows, role design, and SoD analysis skill across 8.5 hours of supervised practice.
Your team builds a complete IAG program in a 5.0-hour capstone, reviewed against governance and audit standards.
From IAG foundations to a capstone governance program build, every technique is practiced in guided labs.
Delivered as
Delivered as a hybrid program of live instruction and guided labs, scheduled around your team's calendar in flexible batches.
Explore the SAP Cloud Identity admin console in a guided demo tenant and map core IAG components to governance goals.
learna)IAM versus IAG concepts and scope
b)The SAP Cloud Identity landscape
c)Governance drivers: SoD, compliance, audit
d)IAG architecture and core components
Configure a demo tenant with identity stores, authentication policies, and a directory integration in the lab environment.
learna)Tenant and identity store setup
b)Authentication policies and conditional access
c)Directory and HR system integration
d)Delegated administration models
Configure an end-to-end access request workflow with staged approvals and provisioning triggers in the lab tenant.
practicea)Building the access request catalog
b)Multi-stage approval workflow design
c)Request types and provisioning triggers
d)Monitoring requests and escalations
Design business roles for a modeled enterprise and run SoD analysis to find and remediate violations.
practicea)Business role modeling best practices
b)SoD ruleset design and risk levels
c)Running SoD risk analysis
d)Remediation and mitigation controls
Launch a certification campaign, process reviewer decisions, and export audit evidence in the lab.
applya)Planning certification campaigns
b)Reviewer workflows and decisions
c)Provisioning and deprovisioning connectors
d)Recertification and audit evidence
Build a complete IAG program for a modeled enterprise: roles, SoD rules, campaigns, and audit reports, then defend it in review.
applya)IAG operating model design
b)Risk remediation planning
c)Audit-ready reporting
d)Program rollout roadmap
Customize this program tailored to your team?
Tell us your training needs: what your team already works with, the level they’re at, and the topics you want them to focus on. We’ll adjust the modules, duration and hands-on labs, and send you a customized outline for your group.
Key Skills and Outcomes Your Team Will Gain
Seven job-ready outcomes your team will demonstrate by the end of the program. Each competency is practiced in guided labs and reviewed in the capstone program build.
Explain IAG concepts and drivers
Describe IAM versus IAG scope, SAP Cloud Identity components, and the compliance drivers behind governance.
Configure identity services
Set up tenants, identity stores, authentication policies, and directory integrations in SAP Cloud Identity.
Build access request workflows
Design request catalogs and multi-stage approval workflows with provisioning triggers and escalation paths.
Design business roles
Model business roles that reflect real job functions and keep role catalogs maintainable.
Manage segregation of duties
Design SoD rulesets, run risk analysis, and apply remediation and mitigation controls.
Run certification campaigns
Plan campaigns, guide reviewer decisions, and produce audit-ready evidence of access reviews.
Deliver an IAG program
Assemble workflows, roles, SoD controls, and certifications into an operating governance program.
Teams that Benefit from this SAP Cloud Identity and Access Governance (IAG) Group Training
This group training is built for identity, security, and SAP teams running access governance who want compliant access without slowing the business. Content adapts to each cohort's roles, SAP landscape, and experience, so every batch practices the workflows it owns, from request design to certification.
Run clean access operations at scale.
Identity teams learn to configure services, build request workflows, and keep certifications on schedule.
Workflow friction
- Manual access processes
- Orphaned and excessive access
- Painful audit preparation
How the program helps
- Faster access request fulfillment
- Fewer standing access risks
- Audit-ready access evidence
Practice use cases
- Request workflow labs
- Certification drills
- Tenant configuration
Control access risk with SoD enforcement.
Security teams learn to design SoD rulesets, analyze violations, and prove controls to auditors.
Workflow friction
- Undetected SoD conflicts
- Spreadsheet-based risk tracking
- Weak control evidence
How the program helps
- Enforced segregation of duties
- Visible access risk posture
- Stronger audit outcomes
Practice use cases
- SoD analysis labs
- Ruleset design
- Risk reporting
Connect identity to the SAP landscape.
Basis and IT teams learn directory integration, provisioning connectors, and lifecycle automation.
Workflow friction
- Disconnected identity sources
- Manual provisioning effort
- Stale user accounts
How the program helps
- Reliable identity synchronization
- Automated joiner-mover-leaver flows
- Cleaner system access
Practice use cases
- Directory sync labs
- Connector setup
- Lifecycle automation
Prove access controls with evidence.
Audit teams learn what good IAG evidence looks like and how certification campaigns produce it.
Workflow friction
- Missing review evidence
- Unclear approval trails
- Last-minute audit scrambles
How the program helps
- Complete certification records
- Traceable approval history
- Smoother audit cycles
Practice use cases
- Evidence walkthroughs
- Campaign reviews
- Control mapping
Cohorts train as a cross-functional workforce, with each small group aligned on shared governance and review standards.
Prerequisites: This program benefits identity administrators, security engineers, SAP Basis staff, and audit professionals working with access management. Basic IAM familiarity helps but is not required, and no prior SAP Cloud Identity experience is needed. Content adapts to each cohort's SAP landscape and identity stores.
Identity Administrator to IAG Program Owner
Tracks how identity practitioners progress from IAG fundamentals to running access governance programs across the program's learn, practice, and apply phases.
A program that grows with identity careers, from first access reviews to confident IAG program ownership.
Mixed cohort, or several teams at once?
We can tailor the training to different teams, roles, and experience levels within the same program.
Certificate of Training Completion.
On successful completion, employees receive an Edstellar course completion certificate, recognizing their commitment to ongoing learning and professional development. It validates the skills they have built and motivates them to keep growing and contribute to organizational success.
Earned, not attended. Awarded on completion of all hands-on labs and the capstone project.
Training Delivery Modes: Virtual, Onsite and Hybrid
Live instruction with guided labs in every module, available across hybrid, onsite, and virtual formats to fit your team's schedule.
Hybrid Training
Instructor-led sessions mix onsite and virtual delivery with guided labs throughout. Teams practice IAG request workflows, role design, and SoD analysis while the instructor coaches and reviews work. Hybrid keeps scheduling flexible without losing live interaction.
- Live instruction across onsite and virtual sessions
- Guided labs with instructor coaching and reviews
- Real cybersecurity workflows with hands-on practice
- Flexible scheduling without losing live interaction
Onsite Training
The instructor delivers the program at your office with lab environments ready to go. Your team works through IAG request workflows, role design, and SoD analysis together, with immediate coaching and review. Onsite suits teams that want focused, collaborative training days.
- Instructor-led training at your office
- Dedicated lab environments for every learner
- Team exercises with live instructor feedback
- Scheduled around your operational calendar
Live Virtual Training
Live virtual sessions deliver the full program online with cloud-based labs. Learners join guided IAG request workflows, role design, and SoD analysis with screen-shared coaching and breakout reviews. Virtual keeps distributed teams on one standard.
- Live online instruction with real-time Q&A
- Cloud labs accessible from any location
- Small-group coaching in virtual breakouts
- Recordings and materials for review
Need a training format that works for your team?
Full days, half days across weeks, or split by module. Tell us the delivery window and we schedule the cohort around it.
Frequently Asked Questions
Share your team size, timelines, and delivery preference, and we will send a detailed per-group quote with batch options.
Yes. Book a discovery call and we will map your SAP landscape and identity stack, team maturity, and goals to a tailored training plan before you commit.
Yes. The program runs live virtual, onsite, or hybrid, with the same guided labs and instructor coaching in every format.
Yes. Onsite delivery brings the instructor and lab environments to your location, scheduled around your team's calendar.
The program is 24 hours across 6 modules, typically delivered over three to four days, with flexible batch scheduling.
Question not answered here?
Put it in the request. A training specialist answers it directly, within one business day.
Where this Training Fits in Your Team's learning path.
SAP access governance follows general identity management and governance, then applies them to SAP's roles and authorisations. Strong SAP access controls, including segregation of duties, are a large part of what SOX auditors test, which is the final step in this path.
Why Choose Edstellar as Your SAP Cloud Identity and Access Governance (IAG) Corporate Training Provider
When comparing providers, Edstellar is the training partner teams choose for identity security expertise and 5+ years of corporate training experience. Our methodology blends concise instruction with guided labs on your SAP landscape.
EXPERT TRAINERS
YEARS DELIVERING
ORGANIZATIONS TRAINED
CERTIFIED
Tailored
Every cohort's labs, examples, and exercises are tuned to your SAP landscape, identity stores, and approval workflows.
Proven Methodology
A learn, practice, apply arc moves your team from IAG concepts to a working governance program in six modules.
Practice-Based Learning
Guided labs in every module cover request workflows, role design, SoD analysis, and certification campaigns.
Expert Trainers
Practitioners who run identity governance programs in production lead every session and review your capstone.
Global Scale
One standard curriculum rolls out across regions, tenants, and teams with consistent labs and assessments.
Measurable Outcomes
Lab reviews and a capstone assessment benchmark each learner's IAG capability against practical checklists.
Build SAP Access Governance With Consistent Roles and Reviewable Decisions
Edstellar connects SAP identity services with the governance decisions behind access requests, roles, and certifications. Participants configure sample identities, develop segregation-of-duties rules, and review access evidence. A modeled enterprise program is assessed for coherent lifecycle controls, justified reviewer decisions, and traceability across provisioning, approvals, and assurance activities.
- Step 01
Consult
We examine IAM familiarity, SAP access responsibilities, and review challenges to identify gaps in identity configuration, role design, approvals, and segregation of duties.
- Step 02
Plan
Governance foundations lead into identity services, access workflows, business roles, conflict rules, and certifications before a complete modeled enterprise program.
- Step 03
Align
SAP identity and access-governance expertise supports administrators, security engineers, Basis staff, and auditors, connecting configuration work with each role's review obligations.
- Step 04
Customize
Synthetic identities and sample organizational roles reproduce access-request and conflict scenarios without importing employee accounts or changing operational SAP access rights.
- Step 05
Execute
Participants configure identity services, process certification decisions, and export audit evidence, receiving feedback on role logic, approval paths, and conflict handling.
- Step 06
Evaluate
We assess the IAG program for traceable access decisions, coherent segregation-of-duties rules, functioning review campaigns, and evidence supporting the proposed controls.
Also from Edstellar
Talent assessments
Psychometric, behavioral, leadership and 360-degree assessment.
→Training needs analysis
Needs analysis, gap identification, and a training roadmap.
→L&D consulting
Learning strategy, content, technology and ROI measurement.
→OD consulting
Org design, succession planning and cultural change.
→Managed training services
Training outsourcing, vendor management, logistics and administration.
→Coaching solutions
Executive and manager coaching that keeps skills in use.
Start an RFP shaped to your needs.
Answer three quick questions about team size, scope, and how often you need the program run, then send the request from the last step. Everything you choose travels with it, so you only fill this in once.
How many team members need training?
SAP Cloud Identity & Access Governance (IAG) Training Training Packages & Pricing
Where L&D holds an annual budget, license packages price the whole year at once instead of raising a purchase order per workshop. Hours and licenses are pooled across teams, programs and locations, so unused capacity is not stranded in one department.
Starter
120
trainee licenses64 hours of group training
Tailored for SMBs
Growth
320
trainee licenses160 hours of group training
Ideal for growing SMBs
Enterprise
800
trainee licenses400 hours of group training
Designed for large corporations
Custom
Unlimited
trainee licensesDuration set by the rollout
Multi-region and multi-year
Training Packages & Pricing
Choose the training format that works for your team. Pricing is customized based on your requirements, cohort size, and delivery needs.
Request SAP Cloud Identity and Access Governance (IAG) Training for Your Team
Share your team size, SAP landscape, identity stores, and timelines to receive a tailored training plan and quote. Book a discovery call to discuss your goals; we confirm availability and respond with a proposal.