Show TOC

Client HubLocate this document in the navigation structure

Client Hub is a native application a user installs on the device that allows multiple business applications to share common credentials enabling an SSO-style behavior. The Client Hub, integrated with Logon Manager, simplifies user onboarding and configuration to enable easier and faster enterprise-wide deployments. Client Hub is an additional layer of management on top of the shared keychain, and allows end users to control which applications are using their credentials. The Client Hub reduces the effort required by the end user to manage multiple passwords for mobile applications and improves the user experience. Client Hub supports both OData and Kapsel applications.

Figure 1: Client Hub Overview for iOS
Client Hub Overview for iOS
Figure 2: Client Hub Overview for Android
Client Hub Overview for Android

Open the Client Hub application to set the SSO passcode. The SSO passcode is a unique password used for Client Hub applications. The same passcode should be entered in the business application when credentials are requested from Client Hub applications. Once the SSO Passcode is created in the Client Hub application, a shared DataVault is created. The Business Application 1 (OData or Kapsel) chooses to work with Client Hub. For the first time, user enters the credentials and, on successful onboarding, these credentials are stored in the shared DataVault using the SSO passcode. If a Business Application 2 (OData or Kapsel) also chooses to work with Client Hub, it can retrieve the same stored credentials using the same SSO passcode and onboard successfully.

Note The SDK installer includes the source code for Client Hub. SAPĀ® does not support customer modifications to the source code after new versions of the template are released. Intellectual property for the template code belongs to SAP. The main purpose for including the source code is to enable code-signing and branding by customers or partners.

The Client Hub simplifies application onboarding by:

  • Onboarding multiple applications to SAPĀ® Mobile Platform. Once the end user has onboarded the first application, all subsequent applications that are enabled for Client Hub onboard automatically.
  • Managing the single sign-on (SSO) vault on the device.
  • Enabling cosigned business applications with the same security configuration to securely share credentials on the device.
  • Supporting multiple security configurations per device.
  • Supporting backend password change events. If the backend password changes, once the end user updates in a single application, all other applications automatically pick up the update.
Note For information about supported Apple iOS and Google Android device platforms, see SAP Note 1901995Information published on SAP site.