With the vast majority of SAP user activity taking place at the application level, it stands to reason that security professionals should focus their access management efforts in this domain. Yet in doing so, they often neglect the infrastructure on...