In OBIEE12c infrastructure is possible configure Single Sign On for Windows Operating System User? — Oracle Analytics

Oracle Analytics Cloud and Server

Home› Oracle Analytics› Oracle Analytics Forums› Oracle Analytics Cloud and Server› Oracle Analytics Cloud and Server

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

In OBIEE12c infrastructure is possible configure Single Sign On for Windows Operating System User?

Received Response
41
Views
9
Comments
korrq
korrq Rank 1 - Community Starter
edited Aug 13, 2024 6:10PM in Oracle Analytics Cloud and Server

Dear All Experts

The requirement is Step by step.
1 - the user (end user) logs into your system.
2 - login is validated and supported by Microsoft Active Directory
3 - the user accesses the page obiee 12 c https://domain.com/analytics.html

the magic !!!
4 - analytics/obiee12c not request user and password entry.

because?
5 - analytics / obiee12c identifies the operating system user and uses it to log in
6 - in the weblogic realm validates the Microsoft AD user and authorize the placing on obiee12c / analytics.

It is possible to configure this in Oracle Middleware?


thank you

Korrq.

Answers

  • rmoff
    rmoff Rank 6 - Analytics Lead

    You're talking about straightforward(!) MSAD/WNA/Kerberos SSO from what I can tell.

    The OBIEE 12c docs point to the MoS article Doc ID 1274953.1, which talks about 11g.

    Looking at the OBIEE certification matrix, it appears that only Oracle Access Manager is supported for SSO at this point. I could be mis-reading it though - a SR to support would confirm one way or the other.

  • rmoff
    rmoff Rank 6 - Analytics Lead

    As a followup to the above, my understanding now is that implementation of SSO against AD remains exactly as it did in 11g, so that MoS doc I refer to above will be a good reference for you.

  • Darek Nurzyński
    Darek Nurzyński Rank 1 - Community Starter

    Hi,

    I'm dealing with problem in configuring OBIE EE 12c with SSO.

    MSO documents are pointing out to some OBIE EE 11g configuration screens which are inadequate in OBI EE 12c.

    In Doc ID 1274953.1 there is:

    ----

    Stage 3: Configure BI for SSO

    Configure BI for SSO

    Finally, we must tell the core BI Application to accept SSO-authenticated clients from Weblogic.

    • Log in to Oracle Enterprise Manager (e.g. http://bieesvr1:7001./em/)
    • In the menu on the left hand side select Farm-> Business Intelligence -> coreapplication
    • Then on the main screen, select the Security tab
    • Click “Lock and Edit Configuration” in the Change Centre section at the top of the screen

      Tick the “Enable SSO” tickbox and select “Windows Native Authentication” in the dropdown

    ---

    In OBI EE 12c installation:

    However when I'm doing the same in OBI EE 12c for http://my.obiee.host:9500/em/

    • Log in to Oracle Enterprise Manager (e.g. http://my.obiee.host:9500/em/)
    • In the menu on the left hand side select Farm-> Business Intelligence -> biinstance
    • Then on the main screen, select the Security tab
    • Click “Lock and Edit Configuration” in the Change Centre section at the top of the screen
    • Tick the “Enable SSO” tick box

    but there is no dropdown. There is only The SSO Provider Logoff URL edit box.


    How and where it should be configured ?

    AD/Kerberos Authentication is tested and works fine with klist or kinit commands.

    OBI EE 12C starts without errors with   oracle.bi.system system.user configured with User Name and Password from AD account created for my.obiee.host.

    http://my.obiee.host:9502/analytics/shows HTTP 401 error.

    Could anybody provide me info about what steps could be taken for OBI EE 12c for proper AD/Kerberos Single Sign-On ?

    Regards,

    Darek

  • User545196
    User545196 Rank 1 - Community Starter

    Hi Darek

    I am also facing the same issue.

    Can you please let me know if you were able to find any solution?

    Thanks

    Ajay

  • user10459876
    user10459876 Rank 1 - Community Starter

    Guys

    I have a similar situation with 12c and SSO. Is there an updated document from Oracle on this. Did anyone have successful implementation of OBIEE 12c and SSO integration using Kerberos

  • RockITCity
    RockITCity Rank 1 - Community Starter

    Robin,

    I am in the middle of this now with a SR with Oracle and they say they are working on a 12c Version of the doc to release, no time table yet though.

    Mike

  • RockITCity
    RockITCity Rank 1 - Community Starter

    From talking with Oracle they are working on a 12c version of this doc but no time table.

    NMike

  • user10311964
    user10311964 Rank 1 - Community Starter

    I have been able to implement SSO

    Here is my architecture:

    1. We user external AD for corporate authentication

    2. We use ADFS for seamless authentication

    3. We use E Business Suite for Role Authorization in BI Publisher

    We hit some challenges but we are able to do a successful POC.  We are configuring SSO for UAT now

    Will upload a document once QA is completed

  • Daniel Willis
    Daniel Willis Rank 4 - Community Specialist

    Oracle has updated info at https://support.oracle.com/epmos/faces/DocContentDisplay?id=2186968.1