What is context-based authorization in SAP BC-IAM-SSO - SAP Single Sign-On?

SAP Term: context-based authorization

• Component: BC-IAM-SSO

• Component Name: SAP Single Sign-On

• Description: An authorization granted to a user according to the context in which the user acts. For example, administrators log on to applications with full permissions by providing two authentication factors, while employees log on with limited permissions by providing a single authentication factor.

Smart SAP Assistant

• Key Concepts: 
  Context-based authorization is a feature of SAP Single Sign-On (SSO) that allows users to access applications and services based on their context. This means that users can be granted access to certain applications or services based on their current environment, such as their location, device, or time of day. This helps to ensure that only authorized users have access to the resources they need.
  
  How to use it: 
  To use context-based authorization, administrators must first configure the SSO system to recognize the user's context. This includes setting up rules for when and where users can access certain applications or services. Once the rules are in place, users will be able to access the resources they need based on their current context.
  
  Tips & Tricks: 
  When configuring context-based authorization, it is important to consider the user's needs and the security requirements of the organization. For example, if a user needs access to an application from multiple locations, it may be necessary to set up multiple rules for different contexts. Additionally, administrators should consider setting up rules that limit access based on time of day or device type.
  
  Related Information: 
  For more information about SAP Single Sign-On and context-based authorization, please refer to the SAP Help Portal or contact your local SAP representative.