Define Application Authentication

Define authentication for your applications that are being deployed on SMP.

You can authenticate Clients, Administrators, and back-end systems using these authentication types:

• Anonymous Access: Applications that do not require authentication can use anonymous access. Users can access such applications without entering credentials.
• Basic Authentication: Basic authentication requires a valid username and password. The basic authentication mechanism relies on the standard Authorization: basic (base64 encoded username:password) HTTP header. Because the username:password can be decoded from the request, basic authentication should only be used over HTTPS.

  SAP Mobile Platform basic authentication uses the following authentication providers:

  • HTTP/HTTPS Authentication
  • System Login (Admin Only)
  • Directory Service (LDAP/AD)
• X.509 Certificate Authentication: X.509 is a client-certificate authentication that requires an HTTPS connection to SMP Server, which can authenticate users based on their personal X.509 certificates.
• Token-Based Authentication: Token-based authentication uses the value of the opaque field in HTTP headers or cookies to authenticate users.
• Single Sign-On: Single sign-on (SSO) is token-based authentication in which an SSO token is passed in an HTTP header or cookie.