by Xiting AG · Access Controls & SoD
SAP-certified suite for automating SAP role design, access risk and SoD projects.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
SAPXAMS (Xiting Authorizations Management Suite) is an on-premise SAP add-on for automating SAP authorization projects, built by Swiss SAP-security specialist Xiting AG. It follows what Xiting calls a Get Clean, Stay Clean approach: first restructuring bloated or over-permissive SAP role concepts down to least-privilege, then keeping them clean over time with rule-based, automated role maintenance rather than manual rework.
The suite is organized into several components covering role design (trace-based, using actual usage data), code analysis, mass role processing, production-safe role testing, time-boxed emergency access with full audit trails, an analytical reporting layer with 100+ reports, and automated generation of a documented SAP security concept. It also includes direct SU24 integration to stay aligned with SAP standard authorization maintenance, and a connector for feeding SAP security events into an external SIEM.
Xiting positions XAMS heavily around S/4HANA migration projects, where trace-based role redesign and Simplification List-aware tooling are used to cut authorization remediation effort. The company reports 700+ customers worldwide and holds SAP-certified integration status for SAP S/4HANA and SAP S/4HANA Cloud (since 2023).
Demo video from the vendor's YouTube channel.
Xiting Authorizations Management Suite (XAMS) covers 20 of 51 capabilities we track in this category
39%“Not evidenced” means our research found no public documentation of this capability — the vendor may still offer it. Confirm on a demo.
How companies use Xiting Authorizations Management Suite (XAMS) alongside their ERP — pulled from Xiting AG's published customer stories, with the ERP each customer runs where they state it.
Manufacturing · Germany
Runs with SAP ABAP systemsSignificant time savings in IT audit preparation; centralized audit documentation; automated role assignment with explicit approval procedures; reduced manual effort and error susceptibility
Manufacturing · Germany · Enterprise
Runs with SAP S/4HANA2021/2022Existing roles automatically converted to new transactions and Fiori apps; 3000 users migrated without involving corresponding departments; successful knowledge transfer to consultants
Manufacturing · Global
Runs with SAP systems (multiple)Less than 15 daysAll SAP systems configured for SSO in less than 15 days; significant reduction in password-related support requests; end-to-end SSO experience for all users
The same companies show up in our library of ERP implementation case studies — useful for seeing what the wider stack around this add-on looks like.
Summarised from each vendor's published customer stories. Figures are the vendor's own claims, not independently verified by ERP Research. Browse add-on case studies →
Used Xiting Authorizations Management Suite (XAMS) with your ERP? Rate it in 30 seconds — it helps every buyer after you.
Rate itInstalled as an on-premise SAP add-on with direct SU24 integration; vendor describes it as SAP-certified and fully compatible with all SAP releases. No SAP Store marketplace listing found; certification appears to be a partner-program certification rather than a marketplace listing.
Connector details independently verified against vendor marketplaces and documentation; last checked 2026-08-20.
Most ERP add-on vendors quote based on company size, modules and integration scope. Get an independent shortlist with pricing guidance below.
Xiting Authorizations Management Suite (XAMS) prices by quote, like most of this category. Here is what actually drives your number — and what to ask before you get one.
4 of the 9 vendors we track in this category publish no list price at all.
Yes. XAMS holds SAP-certified integration status for SAP S/4HANA and SAP S/4HANA Cloud, effective since 2023, and Xiting is an SAP Silver Partner.
Yes. Its Role Designer component uses trace-based analysis and Simplification List awareness to redesign roles for S/4HANA, which Xiting cites as cutting migration effort significantly compared to manual role rebuilds.
It describes the two-phase approach behind XAMS: first restructuring an existing, often bloated SAP authorization concept down to least-privilege roles, then using automated, rule-based tooling to keep that structure clean as the system evolves.
Yes, through its Xiting Times component, which provisions time-boxed emergency (firefighter) access with a complete audit trail of what was accessed during the session.
XAMS is deployed on-premise as an add-on installed within the customer own SAP system, rather than as an external cloud service.
Before you commit to Xiting Authorizations Management Suite (XAMS), see how it sits against the 9 access controls & SoD systems we track — on capability, ERP integration depth and what each one actually charges for.
Access Controls & SoD Buyer's Guide
9 systems compared · 2026
ERP Research
Xiting Authorizations Management Suite (XAMS) doesn't publish a price. Tell us your ERP, seat count and must-haves and we'll come back with an independent view of what it should cost you — and which alternatives are worth quoting alongside it.