{"id":15669,"date":"2017-03-31T00:01:00","date_gmt":"2017-03-30T22:01:00","guid":{"rendered":"http:\/\/e3mag.com\/?p=15669"},"modified":"2019-03-11T13:49:51","modified_gmt":"2019-03-11T12:49:51","slug":"risk-of-indirect-use-better-practice","status":"publish","type":"post","link":"https:\/\/e3mag.com\/en\/risiko-der-indirekten-nutzung-better-practice\/","title":{"rendered":"Risk of indirect use - Better Practice"},"content":{"rendered":"<p>Uncertainty has gripped the global SAP community since SAP's request for compensation in the indirect use litigation was granted.<\/p>\n<p>Within a few hours, the news spread around the globe and SAP customers are increasingly seeking advice from the few known experts. What does this ruling mean for SAP customers?<\/p><div id=\"great-2699254573\" class=\"great-fullsize-content-en great-entity-placement\" style=\"margin-bottom: 20px;\"><a data-no-instant=\"1\" href=\"https:\/\/www.youtube.com\/watch?v=6ZGXMPyM-nU\" rel=\"noopener\" class=\"a2t-link\" target=\"_blank\" aria-label=\"banner_26-04_29_1200x150\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1.jpg\" alt=\"\"  srcset=\"https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1.jpg 1200w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-400x50.jpg 400w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-768x96.jpg 768w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-100x13.jpg 100w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-480x60.jpg 480w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-640x80.jpg 640w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-720x90.jpg 720w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-960x120.jpg 960w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-1168x146.jpg 1168w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-18x2.jpg 18w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/03\/banner_26-04_29_1200x150-1-600x75.jpg 600w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" width=\"1200\" height=\"150\"  style=\" max-width: 100%; height: auto;\" \/><\/a><\/div>\n<p>First of all, I would like to point out that indirect use is not a purely SAP issue. There are many manufacturers who claim compensation for corresponding scenarios.<\/p>\n<p>But how can you deal with this issue and prepare or safeguard yourself accordingly?<\/p>\n<p>Technical aids and \"standard procedures\" offered by various tool manufacturers must be critically scrutinized. However, there are some approaches that must be fundamentally observed in any case.<\/p>\n<p>For example, it does not help to track purely RFC connections and check them against blacklists in circulation.<\/p>\n<p>For example, according to the existing ruling, can one now claim across the board that a Salesforce application causes indirect use in every case? Of course, but the real question is: Is this use subject to licensing? And this is significantly more difficult to answer.<\/p>\n<p>If you only look at the end points of communication, you are making life a bit easy for the experts. Instead, existing usage scenarios must be evaluated holistically.<\/p>\n<ul>\n<li>Is data exchanged in real time between systems, or is it done on a frequency basis?<\/li>\n<li>Is the exchange by human interaction or by technical user?<\/li>\n<li>Is the communication uni- or bidirectional?<\/li>\n<li>Are records exchanged via dedicated query to the database or in bulk?<\/li>\n<li>Or is there even some kind of message queue hanging between the systems as a collection station?<\/li>\n<\/ul>\n<p>Of course, there are a number of other notes that need to be taken into account, and usage rights in the target systems or permissions in the Active Directory environment can also play a further role.<\/p>\n<p>A possible approach to the existing problem can be as follows, for example: As a start, tracing RFC connections to identify potential third-party applications can be done. Equally important, however, is the collection of information on applications that communicate via IDoc interfaces, IP sec connections, HTTP, CHC, SNA, TCP\/IP, OSS, or other paths, for example.<\/p>\n<p>Once you have identified the systems potentially affected by indirect use, you should classify them and prioritize them sensibly based on the level of expected monetary risk.<\/p>\n<p>The next step is to gather detailed information on the prioritized systems and their associated SAP users and outline the infrastructure diagrams as a starting point for an accurate assessment.<\/p>\n<p>The use of external applications should also be identified. This may require an audit of non-SAP authorization and access administrations.<\/p>\n<p>Subsequently, all identified scenarios are individually assessed and evaluated as to whether technical measures can minimize or even eliminate the risk.<\/p>\n<p>Once the most cost-efficient licensing option (or technical solution for avoiding risk) has been identified, existing scenarios are combined into comprehensive use cases to avoid having to purchase usage rights for the same user more than once.<\/p>\n<p>For those users that actually entail a corresponding license purchase, the last step should be to evaluate in detail which functionalities are used indirectly within the SAP environment.<\/p>\n<p>A comparison against the corresponding price and conditions list results in the identification of the most cost-effective coverage option(s) and leads to the long-awaited transparency and sustainable risk minimization.<\/p>","protected":false},"excerpt":{"rendered":"<p>The recent ruling in favor of SAP in the legal dispute regarding indirect use has unsettled the global SAP community. This is one of the reasons why the creation of transparency with regard to the entire SAP infrastructure has become more important. <\/p>","protected":false},"author":359,"featured_media":2453,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"pmpro_default_level":"","footnotes":""},"categories":[11,7,11023],"tags":[4186,11476,48,1633],"coauthors":[26684],"class_list":["post-15669","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lizenz-kolumne","category-meinung","category-mag-1704","tag-indirekte-nutzung","tag-oss","tag-salesforce","tag-sap-community","pmpro-has-access"],"acf":[],"featured_image_urls_v2":{"full":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"thumbnail":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-150x150.jpg",150,150,true],"medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",400,173,false],"medium_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-768x332.jpg",768,332,true],"large":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"image-100":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-100x43.jpg",100,43,true],"image-480":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-480x207.jpg",480,207,true],"image-640":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-640x276.jpg",640,276,true],"image-720":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-720x311.jpg",720,311,true],"image-960":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-960x415.jpg",960,415,true],"image-1168":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"image-1440":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"image-1920":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"1536x1536":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"2048x2048":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"trp-custom-language-flag":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",18,8,false],"bricks_large_16x9":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"bricks_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"bricks_large_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",1000,432,false],"bricks_medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",600,259,false],"bricks_medium_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen.jpg",600,259,false],"profile_24":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-24x24.jpg",24,24,true],"profile_48":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-48x48.jpg",48,48,true],"profile_96":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-96x96.jpg",96,96,true],"profile_150":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-150x150.jpg",150,150,true],"profile_300":["https:\/\/e3mag.com\/wp-content\/uploads\/2016\/11\/Lizenzen-300x300.jpg",300,300,true]},"post_excerpt_stackable_v2":"<p>Das j\u00fcngste Urteil zugunsten von SAP im Rechtsstreit bez\u00fcglich indirekter Nutzung verunsichert die globale SAP-Community. Nicht zuletzt hierdurch hat die Schaffung von Transparenz, bezogen auf die gesamte SAP-Infrastruktur, an Bedeutung gewonnen. <\/p>\n","category_list_v2":"<a href=\"https:\/\/e3mag.com\/en\/category\/meinung\/lizenz-kolumne\/\" rel=\"category tag\">Lizenz-Kolumne<\/a>, <a href=\"https:\/\/e3mag.com\/en\/category\/meinung\/\" rel=\"category tag\">Die Meinung der SAP-Community<\/a>, <a href=\"https:\/\/e3mag.com\/en\/category\/mag-1704\/\" rel=\"category tag\">MAG 17-04<\/a>","author_info_v2":{"name":"Florian Ascherl, KPMG","url":"https:\/\/e3mag.com\/en\/author\/florian-ascherl-kpmg\/"},"comments_num_v2":"0 comments","_links":{"self":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/15669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/users\/359"}],"replies":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/comments?post=15669"}],"version-history":[{"count":0,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/15669\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media\/2453"}],"wp:attachment":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media?parent=15669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/categories?post=15669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/tags?post=15669"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/coauthors?post=15669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}