Fiori app deployment with different instance,how to set the SSO in mobile and external access?

[former_member189009]

Dear Experts,

We have one front-end system and three independence S4/HANA instance. Now we want to establish the fiori app for different user to access different instance. So we have a bunch problem for this.

1. As for a fiori app, it had one ui application, but how do we config the odata service for three different instance for different user. Such as user A, B, C enter the same app, but it's data come from three instance HAP/HBP/HCP.

2. And the authority check, such as plant , we should do this in the back-end system? how do we do the authority check?

3. When we use internal office network we can access the fiori app though mobile, but how do we config this can access though external network, and how to set the SSO in mobile?

Thanks for your sincerely answer

B.R

Kevin

[saurabh_vakil]

1. Are the users A, B and C going to be exclusive to the HAP/HBP/HCP systems or can users A, B and C exist simultaneously in multiple back-end systems? If these users are present in only any 1 of the 3 back-end systems, you could probably build a program to check the existence of the user logged into Fiori into each of the 3 back-end systems. Which ever back-end system the user exists on, use the System Alias corresponding to that back-end. For this your OData services should have System Aliases corresponding to all the 3 back-ends assigned and Default System should not be selected for any of the aliases.

2. The back-end authorizations for the users should be done in the corresponding back-end system where they exist.

3. You can configure a web dispatcher (which would be registered using a Public IP) and use this to forward requests to your on-premise (internal) gateway system and access the Fiori Launchpad from external networks.

[former_member189009]

Dear Vakil,

Thanks for your help. As for the first question, do you have any example to show how to do that ?

B.R

Kevin

[gabmarian]

Regarding question 1 check out this blog.