Hi Manish,
You can also define headers to pass inputs to your request by writing custom code:
var context = message.getHeaders().get("odatacontext");
var companyId = context.getRequestHeaders().get("companyId").get(0);
var username = context.getRequestHeaders().get("username").get(0);
var password = context.getRequestHeaders().get("password").get(0);
parentMap = new LinkedHashMap();
childMap = new LinkedHashMap();
childMap.put("key:companyId", companyId);
childMap.put("key:username", username);
childMap.put("key:password", password);
parentMap.put("key:credential", childMap);
message.setBody(parentMap);
You can find the end to end example here: Third Party Security Schemes with SOAP in Integration Gateway
Where I am explaining how to test it from a rest client.
So when you are making request from mobile app you have to send input in the request header.
Regards, Midhun
SAP Technology RIG