When we say "Lumira", do we refer to the desktop product, Lumira running on HANA (Lumira Server), Lumira Cloud, or the Lumira integration with BI4?
This document will summarize the various authentication options, both for connecting to platforms for hosting content as well as data acquisition.
Lumira Desktop:
The following data access options exist:
The connections to HANA can be done using kerberos SSO.
Connections to universe can be accomplished using kerberos, see SAP note http://service.sap.com/sap/support/notes/1995864 for the necessary configuration steps.
Access to BW is supported with SNC, and of course username/password.
Let's now expand the direct connections: 
Curently, kerberos SSO for SQL Server 2008 & 21012 is supported.
More SSO connectivity options will follow in future releases.
Summarizing data access options from Lumira Desktop:
| Universe Access | BW | Direct SQL | HANA |
|---|---|---|---|
Kerberos SSO to BOE BI4 SSO options apply. See Complete SSO overview See SAP note 1995864 for configuration details | SNC SSO Username & Password | Kerberos SSO to SQL 2008 & 2012 Saved Credentials for all others | Kerberos SSO |
Summarizing content sharing to various platforms
| Lumira Server | Lumira Cloud | BI4 Integration |
|---|---|---|
Username/Password. | Saved credentials | Saved credentials |
Summarizing logon options to the various Lumira hosting platforms for content consumption.
| Lumira Server | Lumira Cloud | BI4 Integration |
|---|---|---|
Kerberos SAML X.509 SAP Logon Tickets Refer to HANA PAM and HANA administration guide. Lumira Server uses HANA as a platform, and inherits the SSO options from HANA XS. | SAML 2.0 Lumira Cloud runs on SAP ID. Like most cloud options, SAML 2.0 is the primary method of authentication. Refer to the HANA Cloud setup for more information SAP HANA Cloud Platform | Lumira integrates natively into the BI4 platform. It relies on the BI4 platform for authentication, which is described in the BI4 security overview. Complete SSO overview |
Finally, Lumira desktop governance which allows you to restrict usage of the desktop tool through managing rights in BI4 can be setup to run automatically through kerberos SSO as well. Follow this article for more information on the governance feature.