realtime's bioLock MFA4SAP technology has helped to protect SAP Systems since 2002. bioLock allows you to set unlimited re-authentication checkpoints and use MFA technology, including biometrics, to ensure only specifically invited users have access to sensitive finance functions. Unless invited, users are ALWAYS rejected. The SAP role and authorization concepts are very complex. SAP provides Master Roles with access to transactions, authorization objects, and organizational-level management. Assigning thousands of roles to thousands of users is a very complex task, especially as users change all the time. As a result, in any organization, users are generally āover permitted" and they have more access than they should have.