End users need the same user ID on the front-end server as on the back-end server. These user IDs require the following authorizations to run a Web Dynpro app:
On the front-end server, they need authorization to launch an app on the FIORI launchpad.
On the back-end server, they need authorization to execute the transaction behind a Web Dynpro app.