Built-in Security Providers for User Authentication and Authorization

SAP Mobile Server supports a variety of built-in security providers that authenticate device users. Administrators create a security configuration and assign one or more providers to it using SAP Control Center.

You can configure a provider of a given type only if that provider is available on the enterprise network.

If you are using SAP Mobile Server in an Online Data Proxy deployment, not all providers are applicable in this environment.

• NoSecurity Provider
  The NoSecurity provider offers pass-through security for SAP Mobile Server, and is intended for use in development environments or for deployments that require no security control. Do not use this provider in production environments — either for administration or device user authentication.
• LDAP Security Provider
  The LDAP security provider suite includes authentication, attribution, and authorization providers. Add an LDAP provider to a security configuration to authenticate administrator logins (on the "admin" security configuration on the "default" domain) or device user logins (any custom security configuration for that purpose).
• NTProxy Security Provider
  NTProxy — sometimes known as native Windows login — is an SAP Mobile Server provider that integrates with existing Windows login security mechanisms.
• SAP SSO Token Security Provider
  The SAPSSOTokenLoginModule has been deprecated and will be removed in a future release. Use HttpAuthenticationLoginModule for SAP SSO2 token authentication.
• Certificate Security Provider
  Use the SAP Mobile Server CertificateAuthenticationLoginModule authentication provider to implement SSO with an SAP enterprise information system (EIS) with X.509 certificates.
• HTTP Authentication Security Provider
  This provider is required when registration is set to automatic. It can also be used to enable SSO into SAP servers in place of the deprecated SAPSSOTokenLoginModule.
• UserRoleAuthorizer Provider
  The UserRoleAuthorizer provider grants logical roles to specific users when the user's roles cannot be retrieved by the configured login module from the back end. You cannot manually configure this provider.
• CertificateValidationLoginModule Provider
  Use a CertificateValidationLoginModule for mutual authentication.