Hi Bernd,
there is a migration guide available in our product help section at SAP Single Sign-On 2.0 – SAP Help Portal Page> Additional Information > Migration Information.
In summary, you can migrate clients and servers in a "big bang" or smoothly, depending on what you are allowed to.
If I get it right, you now also want to access ABAP WebGUI or Fiori from mobile devices, and login with Kerberos (resp. SPNEGO in this Web context). This is of course no migration, it´s a new use case.
For this purpose, you must install CommonCryptoLib, the successor of Secure Login Library and SAPCRYPTOLIB, as ABAP Kernel crypto library. You may also update your kernel to achieve this, as CCL comes with current kernel patches.
-- Stephan
