nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

How to hide / encrypt nqUser and nQPassword when Passing to OBIEE

Rai Qaiser Hussain

Hi All

Below code is shared by one of my friends to call the dashboard URL from external portal but portal should be html link. I tried to transform into URL acceptable by command prompt within oracle 11g application through webutil.client_host but failed,

anyone please help, my main requirement is just to hide nqUser and nqPassword or pass encrypted credentials to OBIEE and it should be acceptable

suggest is it possible to encrypt the credentials and pass to OBIEE Dashboard.

<form action="http://<BI server name>:<BI server port>/analytics/saw.dll?" method="post">

</form>

Note:- We are also working on LDAP , document shared by Mr. @Christian Berg but my company needs this option also.

Find more posts tagged with

Accepted answers

All comments

Gianni Ceresa

Isn't this a double posting with How to hide Credentials when LWSSO is disable ?

Same topic, same question = same answers (and double posting is against the rules of the community)

[Deleted User]

URL and passing username / password is the "hacky" approach and incompatible with a proper SSO approach. You can't have both and the URL approach is definitely something that should be discouraged.

Rai Qaiser Hussain

I have already written in this question about document shared by Mr. @Christian Berg about LDAP. This question is slightly different that's why I have posted but if you think I can delete

Rai Qaiser Hussain

Actually We have multiple clients at different locations with their own infrastructure, some clients may have different requirements that's why our management wants multiple options.

[Deleted User]

What they want" does not invalidate what I wrote. The two are mutually exclusive. You can't have both at the same time - you'd need two different OBI domains to handle both.

Joel Acha

What I've done in order to have SSO and non SSO authentication working on the same OBIEE instance is to have a copy of the analytics deployment in WebLogic. One which can be configured for the SSO access and the other to use the standard non SSO authentication.

[Deleted User]

Ok 2 deployments work as well. Just like 2 domains or 2 instances. Basically you need to duplicate things on the backend

Rai Qaiser Hussain

As I was told, for OAM and OID separate license is required which some of our clients don't want that's why trying to add other options. Every Client has their own OBIEE environment.

Rai Qaiser Hussain

Hi @Joel Acha

Can you share the solution implemented for SSO and Non- SSO for help

Joel Acha

First thing you need to be aware of is that you’ll need to have some backup strategy that ensures that your changes of the ORACLE_HOME/bi/bifoundation/jee/analytics.earfile are backed up.

Many updates and patches make changes to files within the ear file and as a result, your changes will be overwritten.

These posts below are based on 11g but give you an idea of what you need to do in your 12c instance.

https://blogs.oracle.com/blogbypuneeth/steps-to-modify-analytics-application-obiee-11117-to-work-with-sso

https://support.oracle.com/epmos/faces/DocumentDisplay?id=1459445.1

The blog below describes where you’ll need to make changes to references of analytics in your copy of the analytics WebLogic deployment to ensure that it points to your new WebLogic deployment.

https://malyalakp.wordpress.com/2013/01/24/obiee-11g-security-3-setting-up-copy-of-analytics-application/amp/

For example, you could call it analytics-sso. Your URL will be http://OBIEE_SERVER:OBIEE_PORT/analytics-sso