Description
The SAP S/4HANA Cloud Public Edition (GROW with SAP) data connector enables ingestion of SAP's security audit log into the Microsoft Sentinel Solution for SAP, supporting cross-correlation, alerting, and threat hunting. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts).
- Declared author / publisher
- SAP
Declared sources
Metadata from the source file. No dependencies inferred from KQL.
Data types
Declared permissions
Read and Write permissions are required.
Workspace
Workspace
Read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key)
Keys
Workspace
Client Id and Client Secret for Audit Retrieval API
Enable API access in BTP.
Microsoft Sentinel for SAP content package (60+ analytic rules, workbooks, parsers, and more)
Deploy from Microsoft Sentinel content hub.
Connector instructions
Content published in the repository. Refer to the original file for all parameters.
**Step 1 - Configuration steps for SAP S/4HANA Cloud Public Edition**
To connect to SAP S/4HANA Cloud Public Edition, you will need:
1. Configure a communication arrangement for communication scenario **[SAP_COM_0750](https://help.sap.com/docs/SAP_S4HANA_CLOUD/0f69f8fb28ac4bf48d2b57b9637e81fa/a93dca70e2ce43d19ac93e3e5531e37d.html)**
2. SAP S/4HANA Cloud Public Edition tenant **API URL**
3. Valid **communication user (username and password)** for your SAP S/4HANA Cloud system
4. **Appropriate authorizations** to access audit log data via OData services
>**NOTE:** This connector supports Basic authentication. Looking for alternative authentication mechanisms? See [here](https://github.com/Azure-Samples/Sentinel-For-SAP-Community/tree/main/integration-artifacts)
Connect using Basic authentication
Connect events from SAP S/4HANA Cloud Public Edition to Microsoft Sentinel Solution for SAP
Add account
S/4HANA Cloud Public Edition connection
Account Details
Username
Password
SAP S/4HANA Cloud API URL
S/4HANA Cloud Public Edition connections
Each row represents a connected S/4HANA Cloud Public Edition system
Related content
Links established from declared identifiers and solution manifests.
Source provenance
GitHubDisplayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.
- Commit
629d1d3↗- Source identifier
SAPS4PublicAlerts
GSTEP / CATALOG TRACKING
Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC