SSO
SSO is available in Sourcing Force. The project defines the authentication process and how it fits your organisation’s identity management practices.
THE SOURCING FORCE WORKFLOW
Procurement software security.
Protect data and access.
Sourcing Force centralises these exchanges in a digital workflow with access management and action traceability. Buy Made Easy, the single supplier for outsourced procurement, manages its teams’ activities and supplier case follow-up.
Focused demo · Free assessment · Pricing on request
THREE LEVELS OF CONTROL
- User access
- Business rules
- IT responsibilities
Sourcing Force + Buy Made Easy
Cybersecurity: protect the procurement workflow.
Quotes, contact details and bank details often circulate by email for one-off purchases.
Sourcing Force centralises these exchanges in a digital workflow with access management and action traceability.
Buy Made Easy, the single supplier for outsourced procurement, manages its teams’ activities and supplier case follow-up.
The starting point
Sourcing Force security within your organisation.
Workflow security extends beyond signing in. It concerns the people authorised to act, the information they use and the decisions they can make. Procurement and IT need a shared understanding of responsibilities and exceptions.
Sourcing Force acts as a third-party application specialising in class C procurement and tail spend. Your ERP/S2P remains the system of record for rules, approvals, commitments and orders. This division provides the starting point for defining access and data exchanges.
Information that matters
IT security: organise access.
Two-factor authentication
Two-factor authentication is available. Review its use with IT, the profiles concerned and the support needed to keep everyday access under control.
Business controls
Spending limits, approval workflows and supplier or category restrictions apply procurement rules. They complement access controls by governing operations within the agreed scope.
A clear workflow
Cybersecurity and procurement workflow traceability.
Information moves between teams. Responsibilities stay clear.
- 01
Define the scope
List the users, operations and information needed for the workflow.
- 02
Assign
Identify owners for access, business rules and IT exchanges.
- 03
Review
Describe routine situations and exceptions, including role changes or incomplete cases.
- 04
Run acceptance tests
Test the agreed workflows and document results before activation.
The client's ERP / S2PSystem of record for rules, approvals, commitments and orders.
A preparation checklist
Specific questions for each responsibility.
| Topic | Scoping question | People involved |
|---|---|---|
| Identity | Which authentication process should we use? | IT and access owner |
| Procurement rules | Which limits, workflows and restrictions should apply? | Procurement and business owners |
| Data | Which information needs to flow between systems? | IT and master data owners |
| Exceptions | Who reviews unusual access or processing? | Owners appointed by the client |
Management and responsibilities
A documented management approach.
BME Consulting is ISO 9001:2015 certified for class C procurement outsourcing and SaaS e-procurement solutions. ISO 27001 certification has also been obtained. These credentials form part of the review of the management framework and responsibilities specific to your project.
ISO 9001:2015BME Consulting · quality management
ISO 27001Certification obtained · information security
Your initial scope
Connect requirements to real workflows.
Prepare a representative list of users, their operations and the information they need. Also describe changes in responsibility: joining, leaving, temporary cover or a change in scope. This preparation helps define clear acceptance test scenarios.
For data, start with the objects you actually need: request, supplier, basket, cost centre or tracking status. Each exchange should have a source, a recipient and an owner. The procurement ERP integration page explains this scoping approach.
The demo lets you explore access and business controls. Technical and documentary reviews are then organised with the relevant teams, according to your organisation’s scope and requirements.
Prepare your project
Implementation questions.
Are SSO and two-factor authentication available?
Yes. SSO and two-factor authentication are available in Sourcing Force. The authentication process and project requirements are defined with your IT team.
Do ERP/S2P rules remain authoritative?
Yes. Sourcing Force complements the system of record and applies the controls agreed for its scope. Approval, commitment and ordering responsibilities remain with the client.
What should we prepare for the security review?
Describe user profiles, operations, exchanged data and IT requirements. Identify the responsible people so that each question can be linked to the right scope and document.
Your next step
Make room
for the purchases that matter.
Let's discuss your class C purchases and how your organisation works.
Request your free assessment.