SAP systems are connected using an agent that lives on a VM in the same network as the SAP environment.
This is the companion discussion topic for the documentation at https://documentation.sailpoint.com/access-risk-mgmt/help/erp/sap/setupsap/index.html