Before implementing SSO for SAP MBO packages, configure the MBOs so client credentials can be propagated to the EIS and, if enabling SSO for a Hybrid App application, add the appropriate starting point.
Configure the Hybrid App to use SSO2 or X.509 credentials by adding and configuring a credential starting point for the Hybrid App. See Configuring the Hybrid App to Use Credentials in the Developer Guide: Hybrid Apps for details.