SSO with SAP Logon Tickets

SSL Setup

For basic authentication, you set up one-way SSL from the Fiori Client to the Fiori front-end server.

Task	Description
Configuring the client to trust SAP Web Dispatcher	You can have the SAP Web Dispatcher server certificate signed by a well-known CA which is already in the truststore as populated by the device manufacturer, or have it signed by an internal CA. In the latter case, use an MDM solution such as Afaria to distribute the signing certificate to the clients.
Configuring SAP Web Dispatcher Profile Parameters	Configure SSL termination and reencryption. Configure the SAP Web Dispatcher server port. Configure the connection to SAP Mobile Platform Server.
Replacing Default SAP Web Dispatcher PSEs	Replace the default self-signed server certificate with a CA-signed certificate.
Configuring SAP Web Dispatcher to Trust SMP Server	Import the CA certificate used to sign the SAP Mobile Platform Server certificate into the truststore.
Replacing Default SAP Mobile Platform Server Certificate	Replace the default self-signed certificate with a CA-signed certificate.
Configuring SMP Server to Trust the Fiori Front-End Server	Import the CA certificate used to sign the Fiori front-end server certificate into the SAP Mobile Platform keystore.

For information on how to configure initial settings and authentication for SAP Fiori Client, see Application Configuration and Onboarding and the Fiori Client documentation at http://help.sap.com/fiori-client.