OBIEE analytics Login restriction based on domain name

920799

Hi All,

Thanks for looking in to this post.

Our Client have 2 domains.

We have http OBIEE analytics URL works based on windows authentication (IIS).

User1 in abc domain able to login (abc\user1)

User2 in xyz domain also able to login in to application (xyz\user2)

if both users logedin in client Network.

Both user ID's are there in the same LDAP which we use for authentication.

My requirement is,

Is there a way to control the user login based on the domain. so the user related to xyz domain should not get authenticated.

Thank you all in Advance

rmoff

If it's LDAP, can't you just set up the LDAP authenticator in WLS to ignore the relevant branch of the LDAP tree for which you want to disable access?

920799

we are using 10g style of init block security.

I am not sure if I can go ahead with the LDAP Authenticator setup in WLS. LDAP we are using is Global for organization.

Thanks & Regards,

[Deleted User]

Check here: http://gerardnico.com/wiki/dat/obiee/adsi

As Robin said it's just about excluding anyone not pertinent through the Base DN.

920799

Thank you Robin and Christian,

Will go through the inputs and let you know.