How make SSO/SPNEGO authentication work in airwatch mdm browser for SAP Fiori

[former_member575160]

Hi experts,

We have the following scenario:

1) we have implement sap fiori integrated with AD using sso/spnego for all the workstations of the company (desktops and laptops).

2) now we want to enable sap fiori in the mobile devices (cellphones) via airwatch MDM browser but sso/spengo authentication does'nt work. Bellow the error.

There is an configuration for sap fiori or airwatch mdm to enable the integration with AD using sso/spnego ?

Regards,

Bruno

[gregorw]

Have you tried using a Custom Fiori Client? For X.509 Certificate authentication there is the AirWatch Plugin: https://www.npmjs.com/package/airwatch-sdk-fiori-plugin

[former_member575160]

Hi Gregor,

It's an alternative, i'll take a look.

We want to use Kerberos/SPNego because we already have infrastructure with Active Directory and this authentication is already working fine on dekstop/laptops systems. We only can't use on mobile devices with MDM.

Thanks,

Bruno

[former_member105680]

Hi Bruno,

The issue you described may not be Fiori related. Before we get to tha conclusion, can you tell me if SSO/SPNEGO works fine for Fiori Applicatons on Desktop/Laptop system? Are you using Fiori Launchpad on your mobile devices? Does it work for you? Can you load Fiori apps in regular browsers? Let me know answers to those questions meanwhile for additional information about this topic please see following documentation:

https://help.sap.com/viewer/9b4ee51ce91e4a9cadd5e6d43c2992ba/5_OVERVIEW/en-US/051da753b9cfdb72e10000...

Thanks

Aziz

[former_member575160]

Hi Aziz,

SSO/SPNEGO works fine for Fiori on desktop/laptop systems using iexplorer, chrome and firefox.

Fiori Launchpad also works fine on mobile devices using airwatch browser but withouth SSO/SPNEGO. Airwatch is needed to close a VPN with internal network.

I also took a look at the documentation but can't find any browser especific configuration.

Thanks,

Bruno

[former_member105680]

Hi Bruno,

I am curios to know if you tested or if you can test applications other than Fiori?The error you are reporting suggest Airwatch browser is not configured for SPNego, did you reach out to Airwatch to see if they have any specific configuration for their Browser? Our documentation is specific to SAP products so it won't cover Airwatch MDM browser. You will need to consult with Airwatch for those specifics.

Thanks,

Aziz