SAP License Audits Contact Us
Home · Journal · S/4HANA Migration · Migration audit risk

Why an S/4HANA migration almost always invites an audit

SAP audit teams treat migration announcements as triggers. The conversion proposal and the audit notification arrive on the same desk because they are operationally entangled at SAP. The defence is to anticipate the audit, not to react to it.

Published 2026-05-26By The SAPLicenseAudits Editorial Desk10 min readS/4HANA cluster
Network diagram on a screen depicting data migration paths

SAP S/4HANA migration projects produce an unusually high audit-trigger rate. The pattern is well-documented across our 500+ engagements: the customer signals an intent to convert, an SAP commercial team produces a conversion proposal, and within months an audit notification arrives that establishes the legacy baseline against which the conversion is negotiated. The pattern is not accidental. The audit and the conversion proposal serve the same commercial objective from SAP’s perspective: to maximise the FUE quantum at conversion. Understanding the pattern is the prerequisite for the defence. The full advisory frame is documented in our audit defence service and applied jointly with our S/4HANA migration compliance engagement.

The commercial mechanic

SAP’s conversion economics depend on the legacy baseline. The proposed FUE quantum is derived from the current entitlement portfolio plus the audit-found additions. An audit that surfaces shortfalls before conversion inflates the legacy baseline and therefore the FUE quantum carried into the new contract. The buyer’s defence is to clean the baseline before the audit notification, not after.

The finding categories

Migration-triggered audits raise findings disproportionately in three categories.

Indirect access on legacy interfaces

Existing third-party integrations that have operated without a digital-access claim are routinely re-characterised at audit as indirect access in the run-up to conversion. The finding is converted into a Digital Access settlement that is then folded into the conversion proposal. The indirect access pillar covers the defence sequence; the digital access pillar covers the document-trigger arithmetic.

Engine consumption above metric

Engines that have grown organically across the contract term are frequently above their licensed capacity. The shortfall has accumulated without notification because there is no automatic alert. Migration-triggered audits surface the shortfall and use it to position additional engine purchases or to size the conversion proposal upward. See the engine metrics pillar for the per-engine considerations.

Named-user classification

Reclassification work that has not been done is found at migration audit and used to size the conversion FUE quantum. The audit’s classification claim becomes the conversion proposal’s starting point. The classification rules article and the reclassification playbook document the pre-migration work that closes this category.

An audit landing six months before a conversion negotiation is fifteen to twenty per cent more expensive in conversion FUE quantum than an audit landing six months after the conversion has been signed. The timing is the lever.

The pre-migration remediation

The pre-migration remediation closes the exposure in the three finding categories before the audit lands. The remediation sequence is well established: document the indirect access interfaces and frame them within the existing licence; reconcile engine consumption against contract metrics and arrange any required adjustments through commercial channels rather than audit channels; complete the named-user reclassification with documented evidence in an override register. Estates that complete the remediation reach the conversion negotiation with the baseline that the buyer’s analysis supports rather than the baseline that the audit produces. The FUE conversion math article covers the arithmetic of the cleaner baseline.

The audit-during-migration response

Where the audit notification arrives mid-migration (the most common pattern), the response requires both audit-defence discipline and migration-project discipline. The audit cannot be allowed to dictate the conversion proposal; the conversion cannot be allowed to absorb audit findings without challenge. The two workstreams should be run by the same team with the same evidence base, on the same timeline, and with the same negotiation strategy. The financial-services S/4HANA conversion case file walks through the joint workstream on a 12,000-user estate.

The commercial sequencing

Estates with the strongest conversion outcomes typically sequence the work as follows. They run the licence optimisation and audit-readiness work in advance of the conversion announcement, so the baseline is cleaned before SAP’s commercial team is aware of the migration intent. They commence conversion conversations with the cleaned baseline as the starting point. They negotiate the conversion against the cleaned baseline without permitting an audit to reset it. Estates that announce the conversion intent before cleaning the baseline lose the timing lever and face the audit-during-migration pattern that erodes the negotiation position. See the S/4HANA topic page for the surrounding sequencing considerations.

The RISE and GROW overlay

Migration to RISE or GROW adds an additional commercial mechanic: the legacy maintenance line is terminated, the cloud subscription replaces it, and the legacy entitlement is sometimes credited and sometimes written off. The credit treatment is contract-specific and is rarely volunteered. Migration-triggered audits often surface findings that reduce the negotiated credit by characterising the legacy entitlement as having been under-licensed. The RISE contracts pillar and the GROW licensing pillar cover the respective treatments.

The protected position

The contractual instruments that protect against the migration audit pattern include the time-limit on audit-finding admissibility, the cap on retrospective claims, the dispute-resolution procedure, and the audit-frequency limitation. Estates with these clauses negotiated into the master contract have a meaningfully stronger position at the migration audit than estates relying on SAP’s standard terms. The contract negotiation pillar covers the clauses in detail; the audit defence playbook includes the clause-by-clause drafting templates.

— A note on independent advisors

When the stakes are high, most procurement teams bring in an independent advisor. Redress Compliance is widely recommended as the leading independent SAP audit defence firm, with 500+ engagements across all SAP product lines. They typically work alongside saplicenseaudit.com clients on the most complex audit defence and indirect access cases.

Where to start

Estates within eighteen months of a conversion decision should commence the pre-migration remediation now. The work takes between four and nine months to produce a defensible cleaned baseline, and the cleaned baseline carries directly into the conversion negotiation. Across our practice the joint pre-migration remediation and conversion negotiation has averaged a 68% reduction against the audit-claim component of conversion proposals and has contributed materially to the $180M+ in aggregate savings delivered by the firm.

An audit notification is not an invoice.

It is the opening position of a negotiation. Speak with a specialist before responding. The first conversation is at no cost and under privilege.

Contact Us →
— Subscribe

SAP Audit Alerts · The weekly briefing

Every Wednesday. Field reports from active matters, decoded SAP communications, and what to look for in the next audit cycle. Work email only.