Integrating SAP Mobile Platform with Your Single Sign-on Solution

SAP Mobile Platform integrates with SSO systems, including SiteMinder.

In SAP Mobile Platform, when the single sign-on service uses cookies (opaque to SAP Mobile Platform but understandable to other services that are integrated with the your SSO system), there are three authentication scenarios SAP Mobile Platform supports: network-edge authentication, token-based authentication, and basic authentication. In any of these three authentication scenarios, the net result is an authenticated user with SSO credentials that can be used for back-end system interactions.

In SAP Mobile Platform, the only SSO mechanism that can be used with back-end systems is the proprietary SAP MYSAPSSO2 cookie.

Network-Edge Authentication
In network-edge authentication, the SSO system intercepts an unauthenticated client request headed to SAP Mobile Platform, challenges the client to authenticate, and adds an SSO cookie to the request before forwarding to SAP Mobile Platform.
Token-based Authentication
With token-based authentication in SSO, the customized client application obtains the SSO token from the SSO system using whatever means you designate.
Basic Authentication Against an SSO-Integrated Service
With basic authentication to an SSO-integrated back end, the user name and password of the basic credentials are sent to SAP Mobile Platform where the security profile uses the HTTP/HTTPS Authentication provider to pass the credentials to the SSO-enabled Web server for validation.

Parent topic: Single Sign-on Integration Across Client Applications

Configuring Unprotected Network-Edge Authentication with a SiteMinder-Protected Back End