The idea of Secure Login (Server) is to use X.509 certificates to login to AS ABAP, and to define authentication stacks on AS JAVA / SLS to get the desired level of security.
So your short-lived X.509 acts like a strong ticket to AS ABAP, and AS JAVA/SLS is your strong ticket generator.
-- Stephan