How to Keep your Ariba Solutions Secure

[former_member384694]

By Ming Chang – Cloud Information Security Awareness Americas Lead

 

 

Ariba just like other acquired solutions, it  may require different configurations to keep it secure.

 

In Chapter 1 of Security for SAP Cloud Systems, I’ve described how the SAP Cloud Security Framework covers the SAP Core Cloud offering. Those solutions that were acquired from Ariba which was acquired in 2012. Since that time, a lot has changed to properly integrate Ariba into the SAP Global Security Framework.

 

With that in mind, Glenn Magnant and I gathered a list of 11 documents, to assist a Security consultant when securing Ariba. These documents are in addition to what SAP’s Security baseline dictates, as explained in SAP Cloud Security Framework and in Security for SAP Cloud Systems.

 

We have divided these documents into two categories:

• General documentation


• Functional/technical documentation

 

As a security consultant who is responsible for Ariba’s implementation, access to Ariba Connect

required; this is where the repository of detailed documentation is available from SAP. Please contact

your SAP Account Executive or Customer Engagement Executive to obtain access.

 

General Documentation

1. Ariba SaaS Technical Infrastructure Brochure
   
   
   
   1. Pay close attention to Chapter 3, which devotes itself to Security features, procedure, and processes
   
   
   
   


2. Ariba Disaster Recovery Plan


3. Ariba Data Protection and Privacy – Guide to product and service features


4. Ariba Sub-processor list
   
   
   
   1. This can be found using SAP My Trust Center, which allows the customer to subscribe and be notified of any changes
   
   
   
   

 

Functional / Technical Documentation

1. Configuring Security for Master Data Integration


2. Ariba cloud solutions integration toolkit guide


3. Authentication and Security


4. Data import tasks for user information


5. Ariba Cloud Integration Gateway (CIG)
   
   
   
   1. This document covers Ariba with SAP ERP integration
   
   
   
   


6. Ariba mobile app security features


7. Ariba Remote Authentication Deployment Guide
   
   
   
   1. This document covers SSO(Single-Sign On) with Ariba OnDemand from IdP(Identity Provider)
   
   
   
   

 

Both Glenn and I will continue to bring harmonization and useful information on how SAP addresses Security topics. Stay tuned and reach out to your Ariba contact for more information about securing an Ariba system.

 

 

The same blog is posted on LinkedIn.