SSO with BO 3.1

[Former Member]

Hi,

We have SNC in place between AD & BW (Quest)...users can login to BW directly (without a password).

Users login to BOBJ using SAP (BW) authentication...

We'd like to enable SSO for BOBJ (with AD), so that users don't have to enter their BW passwords on the Infoview screen n can directly login to BOBJ...

At the same time; once the user is in, he should be able to access reports etc. without being prompted for a BW password (as is currently the case)...

Note 1483762 would help enable Vintela for SSO with BOBJ...however would we need something else to ensure that post signing in with the AD Id (n no password), the user is not prompted for the BW password...(SNC is active on the BW server)...

Please advise...

Thank you.

[CdnConnection]

Saba,

     BOE XI 3.1 does NOT support SSO with BW.  The only way to get SSO with BW in XI 3.1 is integrate BOE & BW with AD Auth and use pass through authentication.

If you need SSO with BW you will need to upgrade to BI 4.0

Regards,

Ajay

[Former Member]

Hi Ajay,

Yes...we wish to use AD to login to BOBJ...however; once logged in, will the user have to enter BW credentials to access reports etc...(or can SNC be used somehow to allow SSO (with BW) here too)...

We already have SNC in place between AD & BW...

Thank you.

-S.

[CdnConnection]

Saba,

     The only option you can use with XI 3.1 is pass through Auth by using @BOUSER and @BOPASS.  SNC do NOT work with XI 3.1

Regards,

Ajay

[Former Member]

Hi !

Thanks for the fast reply !

I'm not sure what is pass through authentication...by using @BOUSER and @BOPASS...

Please could you direct me to the relevant guide etc...

Thank you.

[CdnConnection]

Saba,

    You will the information in XI 3.1 Universe Designer Guide about how to use the 'BOUSER' and 'BOPASS' variable to pass settings.   Basically in your Universe connections to the Universe you will use these variables to pass the BOBJ user & password.

http://help.sap.com/businessobject/product_guides/boexir31SP3/en/xi31_sp3_designer_en.pdf

Regards,

Ajay

Please let me know if this information was helpful.

[former_member136842]

Hello,

please note that SNC is supported in XI 3.1!

1. First configure Win AD SSO and check that it is working properly

2. Configure the SAP Authentication and check that it is working properly

2. Configure Server Side SNC as described here

http://wiki.sdn.sap.com/wiki/display/BOBJ/How+to+setup+XI3.1+WebIntelligence+SSO+with+SAP+BW

3. Map the SAP Users to your AD Users

With regards to step 3. If your AD Users and SAP Users have the Same User ID (In both System "jdoe" and not in one "jdoe" and in the other "john.doe") you can arrange an automatical User mapping. Pre- requisite for this is a registry Key described in SAP Note - 1343537. This makes life easier...especially when you have lots of users.

@BOUSER/@BOPASS is for RDBMS Systems such as an Oracle RDBMS.

Regards

-Seb.

[Former Member]

Thank you, Seb

So basically, for point 1. I need to configure Vintela (Note 1483762 )..

Would it help, that we already have SNC (SSO) between BW & AD ?

Also, my SAP users are = AD users....

Thank you.

-S.

[former_member136842]

Hi,

well...what you have is client-side SNC for your SAP GUI. The BW does a mapping of your AD User and the BW User inside the BW. So for BW you also got two Users. Your AD Use and your BW User.

We will do the same within XI 3.1. We will map your AD Users with your SAP Users.

So the answer is no. You still have to configure everything i wrote.

With the SAP Note you posted you can configure Vintela.

Regards

-Seb.

[Former Member]

Thank you !

One last question...is Vintela the best option ?

I've read people opting for trusted SSO too....

Thanks again

-S.

[former_member136842]

Hi,

you should go vor Vintela. Its the best option for WinAD SSO.

Regards

-Seb.