For BPC, if you are using EPM Add-in for Microsoft Office you cannot use some of the suggested methods, since it is not possible (for example) to logon to portal, get SSO2 ticket issued and then use this ticket during EPM Add-in connection to BPC 10 on AS ABAP. The EPM Add-in uses REST services, so is not working like a regular Web browser would.
Regarding HANA - generally users don't logon to HANA unless they are developing applications natively on HANA. Often HANA sits behind NetWeaver and users logon to NetWeaver, so I would focus your SSO strategy on the applications, instead of the database.