One basic question 
Mobile SSO = SAP Authenticator + Fiori Client to be installed on the Clients Device ?
Does this need a license ?
In case of Fiori deployment does the Gateway Server have to be configured as Service Provider with TOTP logic module?