Hello Dennis,
Please, find here the Security Guide for BPC 10 version for SAP NetWeaver:
https://websmp102.sap-ag.de/~sapidb/011000358700001239962013E
->Look at the chapter 5.2 Integration Into Single Sign-on Environment
Please, find here the Security Guide for BPC 10 version for MS platform:
https://websmp107.sap-ag.de/~sapidb/011000358700000470172011E
-> Look at the chapter 5 User authentication process
I would like to let you know also that Single Sign-On with BPC 10 is easily possible in conjunction with the SAP NetWeaver Single Sign-On product (license required). This is about re-using the Windows Logon (Kerberos, SPNego).
You can find more details here: SAP NetWeaver Single Sign-On --> Single Sign-On with Kerberos
The implementation is described step-by-step in the How-To videos.
I hope this will help you to find the answers on your questions.
Best regards,
Donka Dimitrova