Soterion vs Xiting Authorizations Management Suite (XAMS)
access controls & SoD head-to-head for ERP teams: evidenced capabilities, published pricing, and which ERPs each actually integrates with.
| Starting price | Quote-based | Quote-based |
| Deployment | Cloud, On-premise | On-premise |
| Company size | Mid-market, Enterprise | — |
| Stated ERP integrations | SAP | SAP |
| Vendor | Soterion | Xiting AG |
Our take
Where Soterion leads
- Stronger evidenced coverage on 13 of the 23 capabilities where they differ (led by organizational-scope violation detection and what-if access simulation).
Where Xiting Authorizations Management Suite (XAMS) leads
- Stronger evidenced coverage on 10 of the 23 capabilities where they differ (led by pre-production role testing and session monitoring and logging).
Where they differ
The 23 capabilities (of 51 in the access controls & SoD taxonomy) where the evidence separates them, biggest gaps first. “Not evidenced” means our research found no public documentation of this capability — the vendor may still offer it. Confirm on a demo.
| Capability | ||
|---|---|---|
| Organizational-scope violation detectionAccess Risk & SoD Analysis | Core strength Organization-level analysis (company code, plant, etc.) | Not evidenced |
| What-if access simulationSimulation, Testing & Remediation | Core strength "What-if" allocation simulator for proposed role changes | Not evidenced |
| Pre-production role testingSimulation, Testing & Remediation | Not evidenced | Core strength Role testing in a non-production environment before rollout; automated pre-deployment checks |
| Session monitoring and loggingEmergency & Privileged Access | Not evidenced | Core strength Complete audit trail of emergency access sessions |
| Periodic access certification campaignsUser Access Review & Certification | Core strength Periodic Review Manager for scheduled user access reviews | Not evidenced |
| Continuous / real-time access reviewUser Access Review & Certification | Core strength Continuous Controls Manager for real-time monitoring of materialized SoD violations | Not evidenced |
| Least-privilege role designRole Design & Identity Provisioning | Not evidenced | Core strength Trace-based role design applying least-privilege principles |
| Mass role processing and replicationRole Design & Identity Provisioning | Not evidenced | Core strength Mass role processing and replication across role landscapes |
| Identity lifecycle provisioningRole Design & Identity Provisioning | Core strength Central Identity Manager for standardized business roles and provisioning | Not evidenced |
| Central standardized role catalogRole Design & Identity Provisioning | Core strength Central Identity Manager for standardized business roles | Not evidenced |
| Password self-serviceRole Design & Identity Provisioning | Core strength Password Self-Service for SAP password resets | Not evidenced |
| Named-user / FUE cost right-sizingLicensing & Cost Optimization | Core strength SAP License Manager showing FUE cost of every role assignment | Not evidenced |
| Pre-approval conflict previewSimulation, Testing & Remediation | Supported | Not evidenced |
| Emergency access approval workflowEmergency & Privileged Access | Supported Elevated Rights Manager routes temporary elevated access via automated workflow | Not evidenced |
| Role mining and clusteringRole Design & Identity Provisioning | Not evidenced | Supported Authorization landscape profiling and overlap detection |
| Historical audit trailReporting & Compliance | Not evidenced | Supported Audit-proof logging across authorization changes |
| Unused-access cost identificationLicensing & Cost Optimization | Supported | Not evidenced |
| BI tool exportPlatform, AI & Deployment | Not evidenced | Supported 100+ analytical reports on roles and authorizations |
| Fine-grained entitlement discoveryCross-Application Identity Governance | Not evidenced | Supported Authorization landscape profiling |
| Usage-based risk prioritizationAccess Risk & SoD Analysis | Core strength Historical transaction usage analysis to separate potential vs. actual risk | Supported ABAP code analysis to inform authorization checks |
| Audit-ready reportingReporting & Compliance | Supported Mitigating-controls documentation and control-execution prompting | Core strength Automated generation of a documented SAP security concept; audit-proof logging |
| License usage optimizationLicensing & Cost Optimization | Core strength SAP License Manager showing FUE cost of every role assignment | Supported Integrated license rule sets for compliance checks |
| SIEM / security event monitoringPlatform, AI & Deployment | Supported Basis Review Manager benchmarking SAP Basis configuration against best practice | Core strength SIEM connector for real-time SAP security event monitoring |
Both grade identically on the other 28 capabilities — see each product's full profile: Soterion, Xiting Authorizations Management Suite (XAMS).
Soterion vs Xiting Authorizations Management Suite (XAMS) — FAQs
Is Soterion or Xiting Authorizations Management Suite (XAMS) better for ERP integration?
Both state integrations with SAP. Always verify the connector against your ERP version with a reference customer.
Which is cheaper, Soterion or Xiting Authorizations Management Suite (XAMS)?
Neither publishes a list price — both quote. Ask each for the all-in first-year cost at your seat count, as one number, and compare those.
Get pricing for both
Tell us your ERP, seat count and must-haves and we'll come back with an independent view of what Soterion and Xiting Authorizations Management Suite (XAMS) should each cost you — and whether a third option belongs on your shortlist.