Example Configuration: SSO with SAP Logon Ticket

Start SAP Mobile Platform Management Cockpit

On any computer on the network, in a supported browser, enter the URL for the Management Cockpit and log in. The URL has the format: https://<host_name>:<https_admin_port>/Admin/

Create a New Application

1. On the Applications page, choose New.

2. In the New Application dialog box, enter the following values:

   Field	Value
   ID	com.sap.fiori.client Unique application identifier in reverse domain notation. This is the application identifier that the application developer assigns or generates during application development. The administrator uses the application ID to register the application with the server, and the client application uses the application ID to send requests to the server.
   Name	Descriptive name for the application, for example, SAP Fiori Client
   Vendor	(Optional) Vendor who developed the application, for example, SAP SE
   Type	Hybrid
   Description	(Optional) Short description of the application

3. Save your entries.

Define the Back-End Connection

1. On the Back End page, configure the following:

   Field	Value
   Endpoint	The URL the application uses to access business data on the Fiori front end server. It has the following format: https://<frontendserverhost>:<port>/sap/bc/ui5_ui5/ui2/ushell/shells/abap/Fiorilaunchpad.html?sap-client=<client>&sap-language=EN
   Rewrite Mode	Rewrite in backend
   SSO Mechanisms	Add SSO2 Add Basic

2. Save your entries.

Define Authentication Mechanisms

1. On the Authentication page, enter a name for the new security profile.

2. Under Authentication Providers, choose Add.

3. Configure the following:

   Field	Value
   Authentication Providers	HTTP/HTTPS Authentication
   Control Flag	required
   URL	URL of the ping service on the ABAP front end server (SAP Gateway Server): https://<frontendserverhost>:<port>/sap/bc/ping?sap-client=<clientID>
   SSO Cookie Name	“MYSAPSSO2” or Gateway session cookie

4. Save your entries.