Decionis Governed Execution Gate for SAP
Dual-gate governed execution for SAP S/4HANA, BTP, and CAP-side workflows — vendor payment release, procurement approval, and finance controls checked before they execute, with a signed Decision Dossier written back to the governed document.
How to get it
Every channel below resolves today — statuses never claim more availability than their channels prove.
Actions intercepted before they execute
Governed actions
- · vendor payment release
- · procurement approval
- · finance control change
Capabilities
- · dual gate execution
- · segregation of duties
- · three way match
- · s4hana write back
- · signed decision dossier
SAP PartnerEdge Solution Review completed and approved on 22 June 2026 (solution 2004368).
When Decionis can't be reached
What this connector does with the action when it cannot get a decision, as the code does it today.
If the Decionis gate cannot be reached, a local fallback gate decides with fixed rules (allow, block, delay or escalate), and a request missing required fields is blocked.
- Change it:
- Set DECIONIS_PROTOCOL_FAIL_CLOSED=1 to block instead.
- If it continues:
- The dossier is marked federated: false, with a local id.
- Known gap:
- The call to the Decionis gate has no timeout.
Failing to reach Decionis is never an authorization. No execution grant is issued without an evaluation, and an action that continues without one is ungoverned, never approved. Every surface's row
Start in shadow mode
Every connector starts read-only: watch what would have been held on your own traffic before any enforcement decision, with a signed Decision Dossier per evaluation.
Distribution channel & setup