SAP Fiori Client Guide

Security Information

When planning the security of a mobile solution, there are multiple factors to consider: the underlying enterprise infrastructure, communication channels, the mobile application itself, and device security and policies.

For general information about security in an SAP Fiori landscape, see SAP Fiori Implementation Information.


In this section:
    Communication Security
    To ensure integrity and confidentiality, all communications between the app on-device and target servers should be strongly encrypted. SAP Fiori Client must use the HTTPS protocol for communications over network connections.
    User Authentication and Single Sign-On
    Different user authentication and single sign-on mechanisms are supported, depending on whether SAP Fiori Client connects to the front-end server directly, or through SAP Mobile Platform Server or SAP HCP, mobile service for development and operations.
    Secure Storage of Data on Device
    Local storage of data is a common vulnerability of mobile apps. SAP Fiori Client provides several measures to ensure the security of persistent data on the device.
    Access to Native Device Capabilities
    Some SAP Fiori apps take advantage of native device capabilities such as the camera, PIM integration (contacts and calendar), and geolocation. For security reasons, it is necessary to prevent unauthorized access to those features.