Soterion
by Soterion · Access Controls & SoD
SAP-native GRC suite for access risk, SoD, licensing and emergency access management.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Works with
SAP- Deployment
- Cloud, On-premise
- Company size
- Mid-market, Enterprise
- Pricing
- Quote-based
- Founded
- 2010
- Headquarters
- Johannesburg, South Africa
Overview
Soterion is a South Africa-based GRC vendor offering a suite of nine SAP-native modules covering access risk analysis, segregation-of-duties (SoD) management, user provisioning, license optimization and audit preparation. It is built specifically for organizations running SAP ECC, S/4HANA On-Premise, or S/4HANA Cloud Private Edition (RISE with SAP), rather than positioning as a general cross-application GRC platform.
Its flagship Access Risk Manager module ships with an out-of-the-box SoD, critical-transaction and data-privacy ruleset, and incorporates users' historical transaction usage data to separate potential risk from actual risk. A "what-if" allocation simulator lets teams test the SoD impact of a proposed role change before applying it in SAP. Other modules cover Basis configuration review against best practice, central identity/role provisioning, continuous real-time monitoring of materialized SoD violations, data privacy discovery, elevated/emergency access, self-service SAP password reset, periodic access review, and SAP license (Full Use Equivalent) optimization.
Founded in 2010 and headquartered in Johannesburg, South Africa, Soterion says it serves more than 150 clients globally and is used in audit engagements by all Big Four accounting firms. It is sold both directly and through partners such as EPI-USE Labs.
Screenshots & demo
Demo video from the vendor's YouTube channel.
Modules & capabilities
Soterion covers 23 of 51 capabilities we track in this category
45%- Segregation-of-duties conflict detectionOut-of-the-box SoD, critical-transaction and data-privacy rulesetCore strength
- Critical / sensitive access detectionOut-of-the-box critical-transaction and data-privacy rulesetCore strength
- Risk scoring and prioritizationNot evidenced
- Prebuilt risk rule libraryOut-of-the-box SoD, critical-transaction and data-privacy rulesetCore strength
- Custom rule authoringNot evidenced
- Cross-system risk analysisSAP-only productNot evidenced
- Organizational-scope violation detectionOrganization-level analysis (company code, plant, etc.)Core strength
- Usage-based risk prioritizationHistorical transaction usage analysis to separate potential vs. actual riskCore strength
“Not evidenced” means our research found no public documentation of this capability — the vendor may still offer it. Confirm on a demo.
Common use cases
- Running SAP SoD and critical-transaction risk analysis with a ready-made, customizable ruleset
- Simulating a proposed SAP role change to see its SoD risk impact before applying it in production
- Cleaning up access risk in a legacy ECC environment ahead of an S/4HANA or RISE with SAP migration
- Reducing SAP FUE license spend by identifying over-assigned roles
- Running scheduled, business-owner-led periodic access reviews for audit evidence
- Managing temporary elevated/emergency access with automated workflows
- Assessing SoD and data-privacy risk in SAP SuccessFactors Employee Central and payroll
Strengths & considerations
Strengths
- Purpose-built for SAP only, with nine integrated modules covering access risk, licensing, Basis review and provisioning rather than a single point tool
- Differentiates potential access risk from actual risk by incorporating real SAP transactional usage history
- Over a decade of SAP-only focus and used by all Big Four audit firms in engagements, per the vendor
Used Soterion with your ERP? Rate it in 30 seconds — it helps every buyer after you.
Rate itERP integrations
Analyzes SAP ECC, S/4HANA On-Premise and S/4HANA Cloud Private Edition (RISE with SAP); also covers SuccessFactors Employee Central and payroll. Deployment mechanics and SAP Store presence not disclosed on vendor pages.
Connector details independently verified against vendor marketplaces and documentation; last checked 2026-08-20.
Pricing
Full Soterion pricing breakdown — cost at 25/100/500 seats, competitor rates & FAQs
Pricing not publicly disclosed; sold direct and through partners such as EPI-USE Labs. Get an independent shortlist with pricing guidance below.
What does Soterion cost?
Soterion prices by quote, like most of this category. Here is what actually drives your number — and what to ask before you get one.
4 of the 9 vendors we track in this category publish no list price at all.
About the vendor
- Founded
- 2010
- Headquarters
- Johannesburg, South Africa
- Notable customers
- Lundin Mining, Komatsu, Nedbank, Weir Minerals
Alternatives to Soterion in Access Controls & SoD
Soterion — frequently asked questions
What SAP versions does Soterion support?
Soterion covers SAP ECC, S/4HANA On-Premise, and S/4HANA Cloud Private Edition (RISE with SAP).
Does Soterion only work with SAP?
Yes. Soterion is built specifically for organizations running SAP, including SAP SuccessFactors Employee Central and payroll, rather than as a general cross-application GRC platform.
Can Soterion simulate the risk impact of a role change before it's applied?
Yes. Its Access Risk Manager includes a "what-if" allocation simulator that shows the SoD risk impact of a proposed role change before it is applied in SAP.
Does Soterion help with SAP license costs?
Yes. Its SAP License Manager module shows the Full Use Equivalent (FUE) cost of every role assignment so teams can see what over-assigned access is costing.
How many organizations use Soterion?
Soterion says it is used by more than 150 clients worldwide and is endorsed by the Big Four global audit firms.
Compare Soterion head-to-head
The Access Controls & SoD Buyer's Guide
Before you commit to Soterion, see how it sits against the 9 access controls & SoD systems we track — on capability, ERP integration depth and what each one actually charges for.
Access Controls & SoD Buyer's Guide
9 systems compared · 2026
ERP Research
- Soterion compared side-by-side with 8 alternatives
- ERP integration checklist — what to verify before you shortlist
- The pricing questions that change the quote
- A Soterion evaluation brief, included with the guide
Access Controls & SoD Buyer's Guide
Get pricing for Soterion
Soterion doesn't publish a price. Tell us your ERP, seat count and must-haves and we'll come back with an independent view of what it should cost you — and which alternatives are worth quoting alongside it.