SAP IAG and its services use SAP Cloud Platform Identity Authentication Service (IAS) for user authentication and to manage access to the applications. Security and permissions are maintained in groups and roles and then assigned to users. Single Sign-On (SSO) with Microsoft Azure, etc. is available through IAS, too.