JinJin48
JinJin48
SAP Consultant | BTP · S/4HANA · US Global Rollout
· 17 min read

Cover: Master Data Governance Architecture and Use

TL;DR
  • SAP Master Data Governance (MDG) provides consolidation, central governance, and data quality management for business partner, product, and financial master data domains in both on-premise S/4HANA and cloud-based (BTP ABAP Environment) deployments, with two hub design patterns: dedicated hub and co-deployment.
  • Classic mode is production-ready across all major domains; cloud-ready mode (ABAP Cloud, SAP S/4HANA 2023+) is available only for the business partner domain and is the recommended starting point for new deployments in that domain.
  • The most important mindset shift: MDG is a governance and workflow layer, not an ETL tool — it requires a designated data owner, defined approval processes, and a distribution architecture to be scoped before any configuration begins.

Where This Article Sits

IDCategoryComponentScope
BTP-C01OverviewData and AnalyticsOverview and Capability Map
BTP-C02IntegrationData Integration SuiteArchitecture and Use
BTP-C03Data PlatformSAP DatasphereArchitecture and Use
BTP-C04AnalyticsSAP Analytics CloudArchitecture and Use
BTP-C05GovernanceMaster Data GovernanceArchitecture and Use (this article)
BTP-C06GovernanceData Governance and CatalogArchitecture and Use

References

ResourceURL
SAP Master Data Governance Product Pagesap.com →
MDG Consolidation and Central Governance (Help Portal)help.sap.com →
Data Replication Framework for MDG (Help Portal)help.sap.com →
SAP Fiori Apps for Master Data Governancehelp.sap.com →
MDG on S/4HANA FAQ (SAP Community)sap.com →

1) The Master Data Governance Landscape

Five MDG capabilities: Central Governance, Consolidation, Data Quality, Mass Processing, Data Replication

SAP Master Data Governance combines distinct capabilities addressing different phases of the master data lifecycle. Understanding which capability applies to a given requirement prevents misscoping.

CapabilityWhat it doesPrimary user
Central GovernanceChange request workflows with approval stages; authorized users create, modify, or retire master data through defined business processesData steward, data owner, approver
ConsolidationMatching, deduplication, and best-record selection across records from multiple source systemsData migration lead, MDM team
Data Quality ManagementRule-based quality checks defined in BRFplus; dashboards track real-time metrics and historical trends; remediation workflows triggered on violationsChief data officer, data quality analyst
Mass ProcessingBulk update operations for large-scale master data corrections and reclassificationData operations team
Data Replication (DRF)Configurable distribution of governed master data to connected SAP and non-SAP systems, with field-level mapping and transformationIntegration architect, basis team

These capabilities operate together in a governance pipeline, not independently. They are not substitutes.

2) How It Connects to S/4HANA

MDG architecture: Hub system with consolidation and central governance flowing to DRF distribution to S/4HANA client, ECC, and non-SAP systems

MDG is embedded in SAP S/4HANA — not a separate SaaS service bolted on. Every deployment involves an S/4HANA system acting as the MDG platform, either exclusively (hub) or alongside transactional work (co-deployment).

                    ┌─────────────────────────────────────┐
                    │        MDG Hub (S/4HANA)            │
                    │                                     │
  Source Systems ──►│  Consolidation  ──►  Central Gov.  │
  (ECC, legacy)     │  (dedup, match)     (CR workflow)   │
                    │                         │           │
                    │                    Activation &     │
                    │                    Staging Area     │
                    │                         │           │
                    └─────────────────────────┼───────────┘
                                              │
                            ┌─────────────────▼──────────────────────┐
                            │    Data Replication Framework (DRF)    │
                            │   IDocs / SOA / RFC / File             │
                            └─────┬──────────┬──────────┬────────────┘
                                  │          │          │
                         ┌────────▼──┐  ┌────▼────┐  ┌─▼──────────┐
                         │ S/4HANA   │  │ Legacy  │  │ Non-SAP    │
                         │ (client)  │  │ SAP ECC │  │ via MDI /  │
                         └───────────┘  └─────────┘  │ Event Mesh │
                                                      └────────────┘

In cloud scenarios, SAP Master Data Integration (MDI) on BTP sits between MDG and cloud line-of-business applications, using the SAP One Domain Model to normalize data across the intelligent suite. SAP Cloud Integration (CPI) handles legacy and non-SAP system connections as middleware.

Key point: DRF is the distribution backbone in all MDG deployments — even co-deployment scenarios using MDG-F (Flex mode) require DRF configuration to distribute data to consuming processes.

3) Maturity Map

MDG maturity status: Classic Mode (production-ready), Co-Deployment (production-ready), Cloud-Ready (ready with prerequisites), Cloud Edition (ready with prerequisites), Federated (early adopter)

Cloud-ready mode was introduced with SAP S/4HANA 2023 and follows clean core principles; classic mode remains available for all domains from earlier releases.

Deployment / ModeMaturityNotes
MDG Classic Mode (hub, S/4HANA 2020+)✅ Production-readyCovers business partner, product, financial, and custom domains; well-documented; large implementation community
MDG Co-Deployment (S/4HANA)✅ Production-readyEliminates replication latency; preferred for single-instance S/4HANA organizations; requires careful authorization design to separate MDG and transactional users
MDG Cloud-Ready Mode (S/4HANA 2023+)⚠️ Ready with prerequisitesBusiness partner domain only; requires S/4HANA 2023 minimum; clean core extensions only; coexistence with classic mode supported during migration
MDG Cloud Edition (BTP SaaS)⚠️ Ready with prerequisitesBusiness partner domain only; follows BTP ABAP Environment maintenance schedules; PaaS variant announced but not yet released; limited domain scope compared to on-premise MDG
Federated Master Data Governance⚠️ Ready with prerequisitesAvailable from S/4HANA 2023; requires multi-instance coordination design; more complex monitoring; best suited for large enterprises with distributed data ownership
Cloud-Ready Mode on Custom Domains🔶 Early adopterPlanned for future releases; not available as of S/4HANA 2023; classic mode remains the option for product and financial domains

4) Requirements Checklist

The MDG Consolidation and Central Governance documentation describes the change request model that all checklists below are designed to scope.

Deployment model prerequisites

Comparison: Hub deployment (dedicated system, governance isolation) vs Co-deployment (single instance, lower overhead)

Checklist itemWhy it matters
Confirm whether a dedicated MDG hub system or co-deployment is requiredHub adds infrastructure cost and monitoring overhead; co-deployment simplifies the landscape but mixes governance and transactional processes
Identify if the organization has an S/4HANA instance suitable for MDG co-deploymentCo-deployment avoids a new system provision but requires authorization design review to prevent transactional users from bypassing governance workflows
Verify SAP S/4HANA release version (2020, 2022, 2023+)Cloud-ready mode and federated governance require S/4HANA 2023 minimum; classic mode is available from earlier releases
Determine whether MDG Cloud Edition (SaaS on BTP) is a viable alternativeCloud Edition covers business partner only; confirm this scope is sufficient before selecting it over on-premise MDG
Confirm system landscape — number of master data clients receiving replicated dataDRF configuration complexity scales with connected systems; each target needs its own replication configuration and monitoring
Check if existing MDG classic-mode customizations are in scope for migration to cloud-ready modeMigration must account for custom workflows and BRFplus rules that may not yet have cloud-ready equivalents

Data domain and scope prerequisites

Master data domain scope options: Business Partner, Product, Financial (MDG-F), Custom domains

Checklist itemWhy it matters
Identify which master data domains are in scope (business partner, product, financial, custom)Scoping determines which MDG mode is applicable — cloud-ready mode covers business partner only as of S/4HANA 2023
Confirm whether custom domain definition is requiredCustom domains require classic mode; do not assume cloud-ready mode supports custom objects
Document volume and distribution of existing master data records per domainConsolidation complexity and deduplication effort depend on existing record volumes; affects timeline and resourcing
Identify all source systems feeding master data into MDGEach source system integration requires its own mapping, transformation rules, and error handling in DRF or consolidation
Confirm whether the financial domain (G/L accounts, cost centers, profit centers) is in scopeMDG-F has a distinct configuration path from business partner and product domains
Validate that product master data scope (procurement, sales, inventory) is explicitly boundedProduct domain governance can expand rapidly; unclear scope leads to requirements creep during design

Workflow and governance process prerequisites

MDG workflow process: Data Owner initiates change request, Approver reviews and approves, System executes activation to staging area and distribution

Checklist itemWhy it matters
Identify named data owners for each master data domain in scopeMDG workflows require designated approvers; without committed data owners, workflow design cannot progress
Document the change request process — who initiates, who approves, in what sequenceBRFplus rule configuration depends on the agreed process; retrofitting workflow rules after go-live is expensive
Confirm authorization concept aligns with MDG roles (data steward, approver, operator)SAP standard roles usually require project-specific customization
Establish mass change governance process — which mass changes require approvalUngoverned mass changes in an MDG system defeat the purpose of the governance layer
Identify audit trail and compliance requirements (ISO, SOX, GDPR)MDG change request history provides audit trail; confirm retention periods and field-level logging requirements before configuration
Define escalation handling for workflow rejections and open change requestsRejection paths must be explicitly configured; stalled change requests block downstream distribution

Integration and distribution prerequisites

Data Replication Framework (DRF) distribution methods: IDoc, SOA, RFC, File, Event Mesh connecting MDG to target systems

Checklist itemWhy it matters
Inventory all target systems receiving governed master data from MDG via DRFEach target system requires a configured outbound replication (replication model, filter, field mapping) in DRF
Confirm replication method per target system (IDoc, SOA, RFC, file, Event Mesh)The choice determines interface complexity, error handling pattern, and monitoring setup
Determine whether SAP Master Data Integration (MDI) is used in the landscapeIf MDI is part of the architecture, MDG must be configured as a core data owner feeding MDI — a distinct integration track from DRF replication
Assess whether SAP Cloud Integration (CPI) is required for non-SAP or legacy ECC connectivityCPI adds middleware complexity; confirm existing CPI licenses and capacity cover the MDG integration scope
Define error handling and retry strategy for failed replication eventsA defined operational process must exist before go-live, including SLA for resolving failed replications
Confirm Event Mesh subscription design if using event-driven integrationSubscriber systems must be configured to consume and process events reliably

Data quality management prerequisites

Data quality management framework: KPIs, rules definition, dashboard monitoring, remediation workflows

Checklist itemWhy it matters
Define measurable data quality KPIs for each domain before configurationBRFplus rules need concrete definitions; vague quality goals produce vague rules that are unenforceable
Identify who owns the data quality dashboard and acts on score degradationSAP Fiori dashboards available from MDG on S/4HANA 2020+ are only useful if an accountable person reviews and acts on them
Confirm whether duplicate check configuration is required in consolidationMatching algorithms require tuning based on domain-specific data patterns; a pilot with sample data is needed before go-live
Establish remediation workflow for quality violations — define trigger thresholds and escalation pathsAutomated violation detection without a remediation workflow generates alerts that no one acts on
Document data quality rule governance — who approves new rules and changesBRFplus rules are configuration artifacts; uncontrolled changes in production can silently affect governance behavior

5) Decision Criteria

Three critical questions before MDG scoping: 1) What measurable problem?, 2) Who owns the data?, 3) Is there a named sponsor?

The three questions to ask first

Q1. What specific, measurable master data problem is driving this project?

MDG implementations without a concrete problem statement routinely lose momentum after initial design workshops. Before selecting any deployment model, the project sponsor must articulate the pain point in measurable terms: number of duplicate records, failed integrations per month, audit findings, or data-related posting errors. If the answer is “data quality is generally poor,” that is a research finding, not a project scope.

Q2. Who owns the master data and where does it currently live?

MDG does not replace data ownership — it formalizes and enforces it. If the organization has not agreed on which system is the master of record for each domain, no workflow configuration will resolve the underlying political problem. Data residency requirements (GDPR, local regulations) also affect whether MDG Cloud Edition on BTP is permitted or whether on-premise deployment is mandatory.

Q3. Is there a named sponsor with budget authority and organizational authority over the data-owning business units?

MDG spans multiple business units — Finance owns G/L accounts, Procurement owns vendor data, Sales owns customer data. Implementations without a cross-functional sponsor who can commit named data owners and approvers from each domain stall at workflow design.

Domain selection by project context

Domain selection guide: New S/4HANA 2023 → Cloud-ready; Existing S/4HANA → Classic; Product/Financial → Classic; Large enterprise → Federated

Per the MDG S/4HANA FAQ, the recommended starting point varies by organizational context:

Project contextRecommended starting point
New S/4HANA 2023 implementation, business partner domain neededCloud-ready mode for business partner; avoid classic mode where cloud-ready coverage is sufficient
Existing S/4HANA (pre-2023), business partner domain neededClassic mode; plan cloud-ready mode migration in a future release cycle
Product master data governance requiredClassic mode (cloud-ready mode not yet available for product domain)
Financial master data governance (G/L, cost centers) requiredClassic mode with MDG-F configuration track
Large enterprise, distributed data ownership across multiple S/4HANA instancesFederated governance pattern on S/4HANA 2023+; requires core-data-owner and application-data-owner role design
Organization running SAP cloud LoB applications needing unified master dataMDI on BTP as synchronization hub; MDG as core data owner feeding MDI
Small organization, single S/4HANA instance, business partner domain onlyMDG co-deployment on existing S/4HANA instance; or evaluate MDG Cloud Edition if on-premise footprint is undesirable
No clear pain point identified yetStop. Go back to Q1.

Licensing and cost

Deployment optionLicensing modelKey question to ask
MDG on SAP S/4HANA (classic or cloud-ready)Included with SAP S/4HANA license for standard domains in most packages; no separate MDG license requiredConfirm with SAP account executive which MDG capabilities are covered under the existing S/4HANA contract
MDG Cloud Edition (BTP SaaS)Separate SaaS subscription; priced per domain and user count; maintenance aligned with BTP ABAP EnvironmentConfirm whether the SaaS subscription scope covers only business partner or additional domains when available
SAP Master Data Integration (MDI)Separate BTP service subscription; consumption-basedConfirm whether existing BTP contracts cover MDI entitlement
SAP Cloud Integration (CPI) for MDG integrationBTP Integration Suite license (message-pack or subscription model)Confirm whether existing CPI capacity covers MDG replication message volume
Data Replication Framework (DRF)Included in S/4HANA; no separate licenseNo licensing question — verify configuration resource availability instead

Note: detailed pricing for hub vs. co-deployment infrastructure is not publicly documented by SAP; engage the SAP licensing team or an SAP partner for specific cost modelling.

6) Common Failures

Seven common MDG implementation failures: Scope assumption, No data owners, Exception handling omitted, DRF scope underestimated, Quality rules late, Mode coexistence mismanaged, MDI architecture delayed

The following failures are documented patterns at the requirements stage, not implementation bugs. See the MDG on S/4HANA FAQ for additional integration and scoping guidance.

Failure 1: Scope assumption — treating MDG as a data migration tool

MDG’s consolidation capability handles deduplication and best-record selection, making it useful during data migration phases. Projects that treat MDG purely as a migration tool fail to scope the central governance and distribution layers that deliver ongoing value. MDG is configured, migration completes, and MDG is then effectively abandoned — governance workflows never go live because the business case for post-migration operation was never established. Always scope MDG for steady-state governance, not just initial load.

Failure 2: No committed data owners before workflow design begins

Change request workflows require named approvers. Workshop participants often agree conceptually on who should approve what, but without explicit commitment from business unit managers, the workflow design contains placeholder roles that are never filled. This surfaces during testing when approval steps have no assignees and change requests stall. Confirm named data owners and their backup arrangements in writing before BRFplus workflow configuration starts.

Failure 3: Exception handling omitted from workflow design

BRFplus workflows are configured for the happy path — creation and approval of standard change requests. Rejection paths, escalation timers, and handling for incomplete submissions are regularly skipped. In production, rejected change requests with no escalation path sit in queues indefinitely, blocking master data distribution. Every workflow must have explicitly designed rejection, timeout, and escalation branches before go-live.

Failure 4: DRF configuration scope underestimated

Projects identify the MDG hub and the primary receiving system but miss additional targets: reporting systems, archived legacy ECC instances, third-party middleware. DRF requires a separate replication configuration per target, including field mapping and error handling. Discovering additional target systems during integration testing — rather than requirements — extends the timeline and requires rework of the replication design. Run a complete system landscape inventory before DRF design begins.

Failure 5: Data governance delay — quality rules defined too late

BRFplus data quality rules require concrete definitions from the business: what constitutes a valid address, which fields are mandatory for which business partner roles, acceptable ranges for financial account attributes. These definitions depend on business input that data teams cannot substitute. When quality rule definition is deferred to after system configuration, the go-live date slips or the system goes live with placeholder checks that do not enforce real governance. Initiate quality rule workshops in parallel with technical design, not after it.

Failure 6: Classic mode and cloud-ready mode coexistence mismanaged

Organizations upgrading to S/4HANA 2023 and adopting cloud-ready mode for business partner while retaining classic mode for other domains must maintain two parallel governance configurations. The coexistence is supported, but it requires a clear migration plan with explicit cutover criteria. Projects that begin cloud-ready mode adoption without documenting the classic-to-cloud-ready migration boundary end up with inconsistent governance behavior — some records governed through cloud-ready workflows, others still routed through classic mode.

Failure 7: MDI integration architecture not scoped until post-go-live

When an organization runs both on-premise MDG and SAP cloud LoB applications (SuccessFactors, Ariba, field service), MDI on BTP is the integration hub for synchronizing master data across these systems. Projects that go live with DRF-only replication without designing the MDI architecture later discover that cloud LoB applications are receiving master data through ad-hoc point-to-point connections or not at all. MDI scope must be assessed during requirements, even if implementation is phased.

FAQ

Q: Does MDG run on SAP S/4HANA Cloud (public cloud) or only on S/4HANA on-premise?

MDG classic mode and cloud-ready mode are available on SAP S/4HANA on-premise and SAP S/4HANA Private Cloud Edition. They are not available on SAP S/4HANA Cloud (public cloud / multi-tenant). For organizations on S/4HANA public cloud, SAP Master Data Governance Cloud Edition (SaaS on BTP ABAP Environment) is the relevant option, currently scoped to the business partner domain.

Q: What licenses are required for MDG, and is it included in a standard S/4HANA contract?

MDG on SAP S/4HANA is generally included in S/4HANA licensing for standard domains in most packages, but the exact entitlement depends on the specific edition and contract. MDG Cloud Edition requires a separate SaaS subscription. SAP Master Data Integration (MDI) on BTP is a separate service. Always verify entitlement with the SAP account executive before scoping — do not assume MDG is included without explicit confirmation.

Q: When should MDG be descoped from a project?

MDG should be descoped when the organization cannot commit named data owners and approvers to operate governance workflows after go-live. Without committed human governance, MDG becomes an expensive change request queue that no one processes. It should also be descoped if the master data domain is fully managed by a third-party system with no requirement for centralized S/4HANA governance, or if organizational maturity for formalized data governance does not yet exist.

Q: What is the difference between hub deployment and co-deployment, and how do I choose?

Hub deployment provisions a dedicated SAP S/4HANA instance running only MDG processes. It provides clear separation of governance from transactional workloads and supports larger multi-system landscapes. Co-deployment activates MDG on an existing S/4HANA transactional instance, eliminating a separate system and removing cross-system replication latency. Co-deployment is preferred when the organization standardizes on a single S/4HANA instance; hub deployment is preferred in complex multi-system landscapes where governance must be independent of any single transactional system.

Q: How should the MDG requirement be documented in a business case or scope document?

The MDG requirement should document: (a) the specific master data domain in scope, (b) the governance problem expressed as a measurable current-state metric, (c) the named data owner(s) and their organizational position, (d) the target systems that will receive governed master data via DRF, and (e) the deployment model selected with rationale. A scope document that states only “implement MDG for master data quality” has insufficient specificity to begin design workshops.

Q: Can MDG coexist with classic mode and cloud-ready mode at the same time?

Yes, coexistence of classic mode and cloud-ready mode is supported on SAP S/4HANA 2023. Organizations adopting cloud-ready mode for business partner can continue operating classic mode for product and financial domains simultaneously. The coexistence requires explicit configuration to route change requests to the correct mode, and a migration plan should document when classic-mode configurations will be retired.

Q: How does federated master data governance differ from centralized MDG hub governance?

In centralized hub governance, a single MDG instance is the authoritative master and all change requests flow through it before distribution. In federated governance (available from S/4HANA 2023), data ownership is distributed: a core data owner manages core attributes (name, address, identifiers) while application data owners manage their application-specific attributes independently. The core data owner coordinates the process and distributes the final state. Federated governance suits large enterprises where different business units have legitimate ownership of distinct attribute sets.

Summary

MDG governance model: Technology + Named data owners + Defined processes + System inventory = Operational master data governance

SAP Master Data Governance provides the workflow, quality, and distribution infrastructure needed to turn master data management from an aspiration into an operational process. The architecture choices — hub vs. co-deployment, classic vs. cloud-ready mode, centralized vs. federated governance — reflect organizational, landscape, and roadmap constraints that must be surfaced in requirements.

The most dangerous assumption in MDG implementations is that the technology solves the governance problem. MDG operationalizes governance that humans must define and commit to. Before configuring a single workflow, a project needs named data owners, defined change processes, scoped domains, and a complete inventory of systems that will receive distributed data. The SAP MDG product documentation details the capabilities; getting these four organizational inputs in place before design is the highest-value activity a consultant can perform on an MDG engagement.

L1. Big PictureL2-C. Data and Analytics
BTP-001: What is SAP BTPBTP-C01: Data and Analytics Overview
BTP-002: BTP ArchitectureBTP-C02: Data Integration Suite
BTP-C03: SAP Datasphere
BTP-C04: SAP Analytics Cloud
BTP-C05: Master Data Governance: Architecture and Use (this article)
BTP-C06: Data Governance and Catalog