SAP MDK application login with ADFS in internal network

[PAstolfi86]

HI,

I have developed an application with SAP MDK that will run on iPad. Authentication occurs via ADFS. By opening the application I am correctly redirected to the welcome page and I log in correctly. However, the customer uses devices with a dedicated APN and the login does not take place from the welcome page but a popup should appear. In fact, when launching the web application from the browser the popup appears correctly. Therefore, by launching the application from devices with a dedicated APN it is not possible to log in as a blank page is displayed without any pop-up to enter the credentials.

How can I enable the display of the popup during the login phase?

Regards

[bill_froelich · Accepted solution]

What is a dedicated APN mean? I am not familiar with that term.

One suggestion would be to create a branded client and set AllowCerts = true in the BrandedSettings.  This will cause the client to use a different view type for the login which might help.

[PAstolfi86 · Accepted solution]

Hi Bill,

APN (Access Point Name) is like a VPN for mobile connection.

We try to recreate the branded client with the flag suggested by you.

I let you know.

Thank you.

Regards.

[Jitendra_Kansal · Accepted solution]

Here is a tutorial on enabling cert-based authentication in MDK branded client. https://developers.sap.com/tutorials/cp-mobile-dev-kit-cert-auth.html

[PAstolfi86 · Accepted solution]

Hi,

by enabling Certificate-Based Authentication suggested by @bill_froelich and @Jitendra_Kansal the login popup show correctly and user can login in the app. Great!!

But we can't execute the logout. If I click the logout the app show the initial screen. Then proceed but the app skip the login page and connect with the previous user. I've tried to disinstall and reinstall the app and also to delete registration in "User registration" tab on Mobile cockpit but the app login with the same user.

Thank you.

Regards.

[bill_froelich · Accepted solution]

When AllowCerts is used the client uses a Safari view for the login. Most likely the IdP is caching a login cookie in Safari. If you clear the cache in Safari after logout I suspect it will then allow you to login as a new user.

[PAstolfi86 · Accepted solution]

Now it works..I can login with the popup that comes from ADFS and I can logout by deleting cache of domain "ondemand.com" from Safari browser. Thank you!!

[Jitendra_Kansal]

You can enable EnableOverrides property to true in the ConnectionSettings block in BrandedSettings.json.

This will allow user to either proceed with current connection settings or scan a new on-boarding QR code.