OBIEE 12c customizations don't work with SSO

CP Strother-Oracle

I have implemented OBIEE 12.2.1.2 with SSO and for some reason all my customizations from my shared folder deployment (analyticsRes) don't work anymore.  In Fact, all the graphics and images are gone and only text-based screens are visible.  It's basically unusable in this state.

However, if I bypass SSO and log in as Weblogic to the default url (http://server:port/analytics) it works fine.  It's only when I go to the SSO url (https://server/analytics) nothing works.

Is anyone using OBEE customizations with SSO?  Is there a config file on the OBIEE server I need to modify in order to "whitelist" the SSO url? How is my customizations getting blocked through my SSO url?

Any assistance would be greatly appreciated.  Thanks.

Regards,

Chuck

Gianni Ceresa

I don't see why SSO would be on a different port ...

SSO it's on the default port in general, so it looks more like you are having a proxy issue.

Your "SSO" url (without the standard port but on port 443 as you are using https) is acting as proxy to OBIEE on it's default port?

If it's the case you maybe have some errors on how you configured the proxy (or not configured it) and so the customization folder isn't covered by the proxy, which will result in the issue you see.

If you explain clearly your setup and how you configured things it will be possible to give you something more precise. Starting from defining exactly what you setup as SSO doesn't change the URL / port of OBIEE, so you implemented something else (with a different name).

handat

You can update the OAM authorization policies and set the URL resources for your analyticsRes to ignored.

CP Strother-Oracle

After further investigation I noticed my browser was blocking my custom logo at the following address:

https://ref12cbitest.us.oracle.com/analyticsRes/res/s_RETECH/master/oracle_logo.png

We are using OHS and webgates so I entered the following entry in my HTTP server plugin, mod_wl_ohs.conf

<Location /analyticsRes>

SetHandler weblogic-handler

      WeblogicHost wd1084.us.oracle.com

      WeblogicPort 9502

      WLLogFile /u01/weblogic.log

  </Location>

Bounced OHS.

Now I can login with SSO and everything comes up normal.

Thanks

Gianni Ceresa

So as said, you where missing part of the proxy config ...

And it has nothing to do with SSO, OHS is a webserver, a kind of Apache HTTP Server with an Oracle stamp on it. And it is acting as proxy in front of weblogic.