Single Sign-on Integration Across Client Applications

Administrators can use their single sign-on system (SSO) of choice with SAP Mobile Platform to achieve end-to-end integration across client applications and Enterprise Information Systems (EIS) resources.

In addition to supporting X.509 certificate security, SAP Mobile Platform expands single sign-on support to third-party and standard single sign-on mechanisms. With expanded single sign-on support, SAP Mobile Platform enables the authentication framework to accept HTTP headers and cookies propagated by the client or a proxy server and then authenticate and propagate the user to the EIS.

• Network Edge Single Sign-on Authentication
  SAP Mobile Platform applications can integrate with HTTP-based single sign-on (SSO) authentication providers.
• Single Sign-on Using NamedCredential
  In expanded single sign-on support, SAP Mobile Platform allows the tokens generated by any system to be used for single sign-on (SSO). Administrators can configure the Web service connection properties with the name of the credential containing the token and how to propagate it to the Web service.
• Propagate Single Sign-on Using ClientValuePropagatingLoginModule
  Applications can use session personalization values or HTTP headers and cookies to pass data that should be used for single sign-on into the Enterprise Information System (EIS) backend. The ClientValuePropagatingLoginModule enables administrators to add client values as named credentials, name principals, and role principals to the authenticated subject.
• Impersonation Prevention Using the checkImpersonation Property
  Administrators can set the checkImpersonation property associated with the security configuration to “false” to allow authentication to succeed when in token based authentication the user name presented cannot be matched against any of the user names validated in the login modules.