SAP fiori embedded plus standalone FES

[federico1900]

Hi all,

in our company we are working on a green field project were we have installed a lanscape S/4 Hana 2022 with embedded FES.

Due to new security requirementes we need to be able to segregate some Fiori app accessed via mobile device.

I need to understand if the installation on a standalone FES connected to the already existing backend can solve the problem ( by activating the odata and icf node just in the standalone FES). The final result would be that most of the APP are provided to the users via enbedded FES while some specific APP via the standalone FES both connected to the same Backend.

Another question is, in case the configuration is possible, do i need to create the user that need to use the segregated APP in the frontend system to add the related app roles or on both systems?

Thanks and regards

Federico

[mamartins]

Another FES will not solve the security fears that you mentioned. 

Do you already have public access to the system via a browser and your concern is the mobile devices? Even if you create an app for the mobile devices, nothing will stop the user to start a browser and access the system...

One option is to create a external server (like a portal) and use it as endpoint for Soap/REST calls from the mobile APP and create a tunnel between this new server and the WD. This way, you will only accept calls from one particular IP address (the PORTAL server).