SAP SSO and identity: Entra SAML vs SNC vs principal propagation vs OAuth

This sheet compares Entra ID SAML, SNC (Kerberos/SPNEGO), SAP principal propagation, OAuth for NetWeaver.

CriterionEntra ID SAMLSNC (Kerberos/SPNEGO)SAP principal propagationOAuth for NetWeaver
Use forSSO to SAP SaaS (SAC, BTP, Qualtrics)SAP GUI and browser SSOForward a Microsoft identity into SAP (Power Platform)Third-party/custom apps calling NetWeaver OData

The verdict, the full comparison, 5 rules and 2 traps are part of AZ-120 access. Unlock AZ-120.