SSO solutions for SAP Fiori for multiple scenarios

Hi All,

We are looking for SSO solution for SAP Fiori application running on our NWGW system connected to backend ECC systems.

Here are the scenarios where we are looking for end to end SSO (which means users don’t need to enter user/password anytime)..

1. Laptops/Desktops 

1. Company owned laptops/desktops
   • Connected from company network (within office or connected via VPN) - pre-authenticated based on windows user/password
   • Connected outside company network - no windows pre-authentication happened.
2.     3^rd Party or Bring Your Own Laptops/Desktops

2. Mobile Devices (iOS, Android, Windows based)

1. Company Owned
2. Bring your own Device

3.Factory RF Terminals

Based on what i have read so far, i am not able to find out a single solution which can cover all the scenarios mentioned above.

We have tested SAML2 (ADFS as IDP and NWGW as SP), SSO works fine for Laptops/Desktops based on windows user/password as these are pre-authenticated.

But how about machines which are connected via internet, mobile devices and RF terminals.

Appreciate your help.

Thanks

Davinder