---
title: "Business Users in SAP for User Propagation"
description: "With user propagation every person who processes data needs a business user in SAP with the same e-mail address as in your identity provider and the business roles that cover the APIs."
source: "https://help.rikaiso.com/public-cloud/2026.2/sap-business-users"
edition: "public-cloud"
editionLabel: "S/4HANA Public Cloud"
version: "2026.2"
latest: true
language: "en"
section: "Information for Administrators > Setting Up SAP S/4HANA Cloud Public Edition"
updated: "2026-11-05"
---

# Business Users in SAP for User Propagation

> With user propagation every person who processes data needs a business user in SAP with the same e-mail address as in your identity provider and the business roles that cover the APIs.

> **Draft brief for authors.** Replace with the final text; keep the task-page structure.

**Page type:** Task · **Audience:** SAP key user

**Contains**

- When this is needed: the named-user mode (destination with OAuth 2.0 SAML Bearer Assertion).
- The business user's e-mail address must match the identity provider; business roles whose catalogs cover the APIs of the arrangement.
- The OAuth 2.0 details of the arrangement and the trust of the subaccount's certificate in the communication system (the full procedure lives on `application-destination`).

**Related information:** `identity-mode`, `application-destination`.

**Source in the product repository:** customer guide §3 "Optional: user propagation", §5.
