Single Sign-on Integration Across Client Applications

Administrators can use their single sign-on system (SSO) of choice with SAP Mobile Platform to achieve end-to-end integration across client applications and back-end resources.

In addition to supporting X.509 certificate security, SAP Mobile Platform expands single sign-on support to third-party and standard single sign-on mechanisms. With expanded single sign-on support, SAP Mobile Platform enables the authentication framework to accept HTTP headers and cookies propagated by the client or a proxy server and then authenticate and propagate the user to the back end.

• Integrating SAP Mobile Platform with Your Single Sign-on Solution
  SAP Mobile Platform integrates with SSO systems, including SiteMinder.
• Single Sign-on Integration with SiteMinder
  Configure SAP Mobile Platform for SSO integration with your SiteMinder environment.
• X.509 Authentication at the Network Edge with a Reverse Proxy
  Enable HTTP with mutual certificate authentication at the network edge with a third-party intermediary reverse proxy server.
• Single Sign-on for SAP
  SAP Mobile Platform supports single sign-on (SSO) authentication for mobile clients that access data from an SAP back end by forwarding credentials from the end user.
• Propagate Single Sign-on Using Populate JAAS Subject From Client
  Applications use HTTP headers and cookies to pass data that should be used for single sign-on into the back end. The Populate JAAS Subject From Client enables administrators to add named credentials, name principals, and role principals to the authenticated subject.
• Check Impersonation Attribute
  The Check Impersonation option in the security profile settings in Management Cockpit ensures that SAP Mobile Platform verifies who the user is after successful SSO-based login. Disabling Check Impersonation in Management Cockpit allows authentication to proceed without verifying that the presented token is associated with the user.