SAP Digital Access Licensing:
The Executive Guide to Audit Defence & Cost Optimisation
A Strategic 2026 Audit Defence Guide for UK Enterprises navigating S/4HANA, Automated Audits, and Document-Based Licensing.
The Shift from Named Users to Digital Access
In the current enterprise IT landscape, there is a palpable tension between clinging to legacy contracts and embracing the inevitable shift towards S/4HANA and RISE with SAP. For many UK businesses, the most significant point of friction in this transition isn’t the technical migration of data, but the opaque, highly punitive world of SAP Digital Access Licensing (formerly known as Indirect Use).
Historically, SAP licensing was built almost entirely on a "Named User" model. You paid a fee based on the physical people sitting at desks, logging directly into the SAP GUI. However, in a modern, hyper-connected enterprise, your SAP core rarely operates in isolation. It is constantly "talking" to third-party systems via APIs, whether that is a Salesforce CRM triggering a sales order, a ServiceNow ITSM creating a maintenance ticket, or autonomous IoT sensors on a factory floor pushing material movements.
Every time one of these external systems triggers a transactional event within your SAP core, it creates a Digital Access event. SAP's modern position is that if a non-SAP system leverages the processing power of the digital core, it is a billable event. This is SAP Digital Access Licensing and you need to be on top of it.
While some consultancies advocate for stubbornly holding onto legacy licensing models to avoid this, at TangoTec, we view the shift differently. SAP Digital Access Licensing is no longer a looming threat; it is a rigid operational reality baked into S/4HANA. When managed proactively with precision and the right tooling, it transitions from a dreaded compliance headache into a transparent, predictable, and manageable value proposition.
The £1M+ Risk: The S/4HANA "Automated Audit Trap"
The primary financial risk for UK firms in 2026 is what we term the "Automated Audit Trap." SAP has deeply integrated sophisticated background monitoring within the S/4HANA core. GLAC (Global Licence Audit and Compliance) auditors no longer need to sit in your office for a week conducting interviews and manual spot-checks, they can simply pull the system usage logs to see, in real-time, exactly how many documents are being created by non-SAP sources.
If you haven’t formally transitioned your contract to the Document-Based Accounting model (the official "SAP Digital Access Licensing" model), you are likely still operating under the ambiguous legacy "Indirect Use" rules. This is where the financial liability explodes.
Under those old rules, SAP could technically claim that you require a full "Named User" licence for every single external person interacting with your Salesforce instance or your B2B e-commerce platform, because their actions eventually touch SAP. This interpretation can easily spiral into unbudgeted penalties in the millions.
Why "Moving with the Tide" is the Superior Strategy
Rather than desperately fighting an unwinnable battle over legacy contracts that were never designed for an API-led, cloud-first world, forward-thinking CIOs are proactively migrating to the official Document-Based SAP Digital Access Licensing model. The strategic and financial benefits of making this switch deliberately (rather than during an audit panic) are clear:
- Predictability: You stop paying for "potential" users accessing external systems and start paying strictly for actual business outcomes (the volume of documents created).
- Audit Immunity: Once you officially adopt the Document-based model, the total "User Count" for your indirect systems (like Salesforce or Webshops) becomes entirely irrelevant to the auditor.
- Predictive Optimisation: By using live reporting and middleware analysis, you can see exactly where your licensing spend is being generated and optimise your API architecture to reduce unnecessary "document noise."
To successfully navigate this, you must ensure your S/4HANA Licence Optimisation strategy accounts for both human FUEs and Digital Access documents simultaneously.
Cortex Suite: Precision Governance for Digital Access
Navigating Document-Based Licensing requires more than native SAP estimation reports, which often over-count created documents and lack granular filtering. The Cortex Suite combines six modular engines to give enterprise IT teams total visibility, accurate classification, and audit-grade controls over their SAP digital core.
Cortex Sense
Monitors external system activity from Salesforce, ServiceNow, and IoT endpoints into the SAP core, isolating true third-party API triggers from internal user workflows to establish a clean baseline.
Cortex Insight
Categorises transactional events across SAP's 9 document categories, automatically applying 0.2 multipliers to financial and material items to eliminate false full-cost billing.
Cortex Echo
Traces secondary and automated downstream document creations, catching and neutralising the "Double-Dip" trap so you are billed exclusively for initial creation events.
Cortex Reframe
Simulates financial scenarios between legacy Named User contracts and Document-Based models, giving procurement leaders clear data to negotiate optimal RISE with SAP terms.
Cortex Vault
Maintains an immutable, audit-ready compliance repository of historic document logs, delivering verifiable evidence to refute invalid GLAC auditor assumptions.
Cortex Pulse
Delivers continuous tracking and threshold alerts for document creation volumes, helping IT teams optimise API payload design and prevent unexpected overage fees.
Technical Insight: The 9 Document Multipliers
Under the official SAP Digital Access model, you are charged based on the creation of nine specific document types. However, not all documents are created equal. To protect high-volume, low-margin transactional businesses (such as manufacturing and logistics), SAP has implemented a "Weighting" or multiplier system.
It is crucial to understand that only the initial creation of the document by an external system counts towards your licence pool. Subsequent reads, updates, or deletions triggered by that external system are generally considered out of scope and are effectively "free."
A common audit trap is the "Double-Dip", where a company is mistakenly charged for both a Sales Order and the subsequent Invoice, even though the Invoice was a secondary action. Identifying these architectural errors requires deep analysis.
| Document Category | Document Types Included | Multiplier Weighting |
|---|---|---|
| High-Value Documents | Sales, Purchase, Invoice, Manufacturing | 1.0 (Full Cost) |
| Service & Quality | Service & Maintenance, Quality Management, Time Management | 1.0 (Full Cost) |
| High-Volume Documents | Financial Documents, Material Documents | 0.2 (80% Discount) |
Without high-end tooling like Cortex Suite to filter out the noise and accurately apply these 0.2 multipliers, UK enterprises frequently overpay, simply because they cannot prove to the auditor which documents were primary creations versus secondary updates.
Commercial Impact: Executive Budget & ROI Matrix
Adopting Document-Based Licensing without dedicated governance tooling leaves enterprises vulnerable to default auditor assumptions, over-calculated document counts, and unbudgeted penalty claims. The Cortex Suite transforms SAP licence management from a defensive compliance cost into a proactive financial optimisation model, delivering measurable ROI across six commercial pillars:
| Cortex Module | Primary Commercial Role | Direct Budget & Financial Impact |
|---|---|---|
| Cortex Sense | External Connection Baseline | Eliminates Named User Overcharges: Prevents SAP from misclassifying external system users (Salesforce, ServiceNow, IoT) as full-priced Named Users, mitigating significant penalty claims. |
| Cortex Insight | Multiplier Weighting Optimisation | 80% Discount Assurance: Automatically applies SAP's 0.2 multiplier to high-volume financial and material creation events, stopping false full-cost document charges. |
| Cortex Echo | Secondary Cascade Protection | Prevents Double-Counting: Filters out automated secondary creations (such as downstream invoices from sales orders), protecting against false volume spikes. |
| Cortex Reframe | Contract Conversion Simulation | Negotiation Leverage: Models exact financial scenarios between legacy Named User and Document-Based rules, unlocking contractual savings during RISE with SAP transitions. |
| Cortex Vault | Audit Evidence Repository | Refutes Unjustified Penalty Claims: Maintains an immutable historical log of actual system activity, providing verifiable proof to successfully challenge auditor assessments. |
| Cortex Pulse | Overage Prevention & API Tuning | Prevents Year-End Overage Fees: Delivers threshold alerts and API payload insights, allowing engineering teams to keep document creation volumes within agreed contract tiers. |
Executive Commercial Bottom Line
For an enterprise managing indirect access exposure, deploying the Cortex Suite typically identifies 15% to 30% in conservative, verifiable billable volume reduction, establishes an audit-ready compliance position under Document-Based rules, and provides the quantitative evidence required to control long-term S/4HANA commit costs.
CORTEX REFRAME | Reframe builds clean, position-based SAP roles using real-world usage history, ensuring zero disruption to daily operations
CORTEX ECHO | ECHO cuts SAP licence waste across legacy and cloud contracts, evaluating real-world activity for Named Users and optimising assigned access against SAP rulesets for RISE FUE
CORTEX INSIGHT | Insight delivers visual GRC dashboards and pre-emptively simulates access changes to prevent toxic Segregation of Duties conflicts
CORTEX VAULT | Vault compresses execution history into searchable intelligence to eliminate audit false positives and detect behavioural anomalies
CORTEX PULSE | Pulse acts as the live security monitor for your enterprise, transforming identity management, elevated emergency access (Firefighter), and routine access reviews into a dynamic, heavily audited workflow
CORTEX SENSE | Sense fundamentally redefines SAP threat detection by decoupling rule evaluation from log collection, empowering security teams with an active alert console and automated response actions
CORTEX CENTRAL | Central is the strategic command hub that consolidates SAP licensing, optimisation, and cross-system compliance into a single pane of glass for enterprise-grade governance
Choose the CORTEX Suite, drive smart cost reductions, defend against risk, and deliver compliant audit results!
