SSO with OBIEE 11 g

Similar Questions

• OBIEE 11.1.1.6 SSO with OAM 11.1.1.5: problem of attribute OID 11.1.1.6

  Hello world!
  
  I configured an OAM (webgate) + DIO + OBIEE + OHS system.
  The OBIEE is protected via OHS(weblogic module) and webgate. It works very well.
  The CAO authenticates OID (default user identity store).
  The * "User research Base" * is the same (* "cn = Users, dc is mydomain, dc = com" *) in the store of identity and authentication provider OID of OBIEE too.
  SSO is enabled in OBIEE and suppliers are:
  OID (provider that performs authentication LDAP 1.0) JUST
  REQUIRED OAM (Oracle Access Manager identity Asserter 1.0) provider
  DefaultAuthenticator (WebLogic Authentication Provider 1.0) SUFFICIENT
  DefaultIdentityAsserter
  
  IF the * "User name attribute" * is * '' cn '' * in-store OAM of identity of the users and the provider of the OID of the OBIEE * "user name attribute" * is * "cn" * (by default) also, everything works fine.
  
  But I have to use * "orclSAMAccountName" * instead of * "cn" * (OAM and OID provider). And in this case, I have the problem.
  The OID of the OBIEE provider are:
  All users filter: (& (orclSAMAccountName = *)(objectclass=person))
  The user of the name filter: (&(orclSAMAccountName=%u)(objectclass=person)))
  Username attribute: orclSAMAccountName
  
  I did a test user:
  CN = test
  SN = test_sn
  orclsamaccountname = test_sama
  UID = test_uid
  krbprincipalname = test_krb
  I can authenticate with test_sama OAM, but OBIEE say: * "" you are not logged here: Oracle BI Server. "*"
  The bi log shows that:
  + By default (self-adjusting)' > < BISystemUser > <>< 00093dFuR ^ HFW7PMye7i6G00052S000Tt7 > < 1345642607333 > < BEA-000000 > < javax.security.auth.login.FailedLoginException: [Security: 090304] authentication failed: User test javax.security.auth.login.LoginException: identity [Security: 090300] Assertion failure: test user does not exist +.
  + oracle.security.jps.internal.api.jaas.AssertionException: javax.security.auth.login.FailedLoginException: [Security: 090304] authentication failed: User test javax.security.auth.login.LoginException: [Security: 090300] identity Assertion failure: test user does not exist.
  
  Why does search OBIEE the * '' cn '' * and why does not use the * "orclsamaccountname?"
  
  Any idea?
  
  Best regards, Jani

  Hello Joseph,.

  This is a known issue in OBIEE 11.1.1.6.0, please see: OBIEE 11.1.1.6 Agent failed with error code: IHVF6OM7:OPR4ONWY:U9IM8TAC [nQSError: 13039] the imposter does not exist in the BI [1446877.1 ID] Security Service

  We have configured OBIEE 11.1.1.6 on Linux and use Single Sign On (SSO) with authentication Native for Windows (Ondaaah).

  Configured authenticator AD, select sAMAccountName instead of CN for the attribute of the user. SSO in MS license. When you try to access the OBIEE presentation services we met the below error.

  «You are not logged here: Oracle BI Server.»

  When to check the logfile biserver1 found: failure of the Assertion of identity [Security: 090300]: user OracleSystemUser does not exist

  After you apply the hotfix 13553428 on top of 11.1.1.6.0 OBIEE we connected in OBIEE presentation services.

  It works very well with OBIEE, 11.1.1.5.0 and 11.1.1.6.1

  OBIEE fixed in 11.1.1.6.1. Apply Patch 13742915.

  If you want to stay in OBIEE 11.1.1.6.0. Apply Patch 13553428.

  Let me know if this solves the problem of Asserter.

  Pls mark so useful or response.

  Thank you
  SVS-

• OBIEE SSO with permission

  Hi gurus,
  
  
  (1) I have configured instance SSO with windows Active Directory and OBIEE.
  
  (2) I also have another instance (without configured SSO) with table external authentication (verification of name and password of the user) and authorization (groups, that populate the session for the filtering of data variables).
  
  Now my question is, I want a combination of scenario 1 and scenario 2. I want OBIEE SSO with Active directory
  
  and the groups in the external table.
  
  The reason being, my groups are custom in the outer table groups, I do not want to keep users in the repository.
  
  can you please give me some pointers if the scenario is possible. Thanks in advance
  
  Thanks and greetings
  Satya

  Now my question is, I want a combination of scenario 1 and scenario 2. I want OBIEE SSO with Active directory and the groups in the external table.

  I don't have what is your question? Just do SSO with AD, and then load the groups in the GROUP through SQL init block. What is your real problem?

  To filter the report data, you must have the same structure of Group at Web cat I guess (correct me if I'm wrong).

  Yes, even if you do not need to use the same workgroup name. Is MNI names I'd rather have completely separate groups, some for safety to the RPD for Web security catalog. As long as the groups exist in the appropriate location (RPD or Web catalog) and they are assigned in the block GROUP init then OBIEE will be happy, they do not need to exist in both places.

  (2) No SSO will fill the Remote_User variable rather than the default USER variable.

  No, you say OBIEE where to put the REMOTE_USER value. "You can simply select ': USER"FROM DUAL or if you have your users defined in a table, you can also authenticate the user exist in this table, SELECT": 'FROM USER_TABLE WHERE USER_ID =' USER: USER" which adds another layer of authentication to your SSO solution.

• SSO to OBIEE by using IIS.

  Hi experts,
  
  I configured SSO in OBIEE located on IIS. Our OBIEE is LDAP configured.
  
  I created the user in RPD. When I connect to my system with the user and browse url it direct me to the dashboard (SSO works).
  
  But when user B (which is not created in OBIEE DPR) but exist in AD try to browse URLs it get the page: you are not currently loged in.
  
  What is the problem... ?

  For block init USER use your LDAP data source and assing the USER sAMAccountName, make sure you set "necessary for authention".
  Also, make sure that the ldap settings are accurate.

  If it helps pls brand.

  Updates on this?

  Published by: Srini VIEREN on 6 December 2012 06:51

• Software needed to achieve SSO with Webcenter Suite 11.1.1.2

  Hi all
  
  I installed Web center suite 11.1.1.2 on my Machine. Can someone suggest, what software I need to install in order to achieve
  Oracle SSO with E-Business Suite and OBIEE.
  
  
  
  
  
  
  Concerning
  Nanfack marzolf
  
  Published by: user11965597 on 15 Sep 2011 03:58

  Using these business applications with WebCenter spaces? If you start a new project, why don't you use WebCenter 11 G PS3 or PS4 because there are a number of new features? Also the Oracle Access Manager (OAM) is the recommended method to achieve the goal of SSO.

  Although Oracle SSO (OSSO) is the main solution for Oracle 10 G Infrastructure but Weblogic also support OSSO. Anyway, if you want to use Oracle SSO (OSSO) in WebCenter 11.1.1.2, you need after 2 software: -.

  1 oracle HTTP Server (OHS)
  2 oracle Internet Directory (OID)

  You can find the configuration details in http://download.oracle.com/docs/cd/E15523_01/webcenter.1111/e12405/wcadm_security.htm#BGBDADFE.

  You don't need additional software for E-business Suite as well.

• SSO with Cloud-based deployments hybrid

  Hello

  I m wondering, how SSO works with the Hybrid Cloud-Based deployments.

  I want to use Jabber for Windows with WebEx Connect and unified with Cisco WebEx Communications integration.

  Issues related to the:

  1. How can I configure Jabber for Windows to use SSO with WebEx Connect after Installation of the Client?
  2. I ve read, that the SSO with WebEx Connect username will be [email protected] / * /. Fix?
  3. I ve read, that I need to create a jabber - config.xml with a following to apply Jabber for Windows to use the connection information Webex-Connect also for telephone Services. Fix?
  4.      presence  
  5. If this is correct, Jabber for Windows will use [email protected] / * / to authenticate with CUCM, but CUCM would need only the name without the domain name user. From my point of view, Jabber for Windows will not be able to authenticate with CUCM Telephony Services.

  Any thoughts?

  Thank you

  Tino

  Hi Tino,

  You can use the command line arguments to specify the SSO with WebEx presence server. There is no real soloution SSO at present for hybrid mode (CUCM, unit Cxn).  See the answer online for other issues.

  • I ve read, that the SSO with WebEx Connect username will be [email protected] / * /. Fix?

            >> Fix

  • I ve read, that I need to create a jabber - config.xml with a following to apply Jabber for Windows to use the connection information Webex-Connect also for telephone Services. Fix?

  >> Attribute 'PhoneService_UseCredentialsFrom' can only be used in the deployment prem No.. Check the section plan for authentication of the administration of Jabber for Windows for more information guide.

  Thank you

  Ménard

• ASA WebVPN SSO with cactus

  Hello

  I use SSO with HTTP POST parameters for SINGLE sign-on for web applications behind my ASA.

  I am currently playing with cactus.

  My settings are:

  action = login

  login_username = CSCO_WEBVPN_USERNAME

  login_password = CSCO_WEBVPN_PASSWORD

  Realm = ldap

  The connection works fine, but after the post OFFICE, the Web server sends a HTTP "302 OK code." Normally, it should be "302 moved" or "200 OK".

  The ASA does not include what to do, to do nothing and replies with an error "Server is not available >.

  When I press the 'Home' button and click again on the bookmark of cactus, I'm connected to cactus. It seems that there is a cookie or something missing.

  When I do exactly the same with a browser, it sends after the "302 OK" normal GET and I am connected.

  Me seems a mistake in cactus, but I'm not also sure if ASA does not respond properly?

  Also, when I change the type of bookmark of https to post, it works! BUT: post plugin only supports http and not https, so my connections has send in clear on the internal network.

  Any ideas?

  Thank you

  MB

  configure the POST plugin for HTTPS by using the csco_proto=https parameter
  
  in the Post-Plugin URL

• BI publisher integrated with OBIEE?

  Dear Experts,

  
  

  
  

  
  

  oracle.xdo.servlet.security.AdminUser cannot be cast to oracle.xdo.servlet.security.DirectoryUser

  
  

  BI publisher integrated with OBIEE, but I use security as a guarantee of Bi Publisher.

  I created a role in the bi Publisher and trying to assign the report, but it shows the above mentioned error.

  Can use us the Editor while only integrated with OBIEE bi security?

  
  

  Thanks in advance!

  
  

  
  

  
  

  
  

  Hello Vinay,

  You can't use template security BI Publisher when the BEEP is integrated with OBIEE. You must use the Oracle Fusion Middleware security model in this case because OBIEE manages access. Security model BI Publisher can be used when you use a Simple installation, no installation of the company. To create the roles when you use Oracle Fusion Middleware I recommend you follow our manual steps: http://docs.oracle.com/cd/E28280_01/bi.1111/e22255/config_sec.htm#BIPAD132

  BR,

  Liviu

• Are OBIA with OBIEE 12 c now?

  Hi guys,.

  I wanted to know if anyone has tried to use the applications of 11g available in version OBIA with OBIEE 12 c.

  pus

  Oracle has already released OBIA 12 c?

  I checked out the site of oracle, but failed to find anything.

  Really appreciate if anyone can guide me with this.

  Thank you

  Dorin

  Christian Berg , not sure I read the matrix certification right but I would say you can upgrade your OBIA 11 to use OBIEE 12 c and it is taken care of.

  It is therefore not an olive TREE packed with OBIEE 12 c to come, but it supports an upgrade of OBIEE.

  Oracle BI Server and Admin Oracle BI presentation services Oracle BEEP

  FMW 12.2.1.0.0

  Oracle Business Intelligence applications

  11; 7.9.6.4.0

  Combination of supported. See BI Apps SRSP for more detailed configuration. (http://download.oracle.com/docs/cd/E14223_01/bia.796/e14221.pdf) Please see the bulletin note: 1196943.1 on My Oracle Support (http://support.oracle.com)

  It took in the FMW 12.2.1 certification matrix.

  I'm not completely sure on the way to understand that, if a double value may audit calling for an 'official' in space MOSC answer from Oracle?

• problem with OBIEE 1.1.1.7

  I installed my new server linux with OBIEE 1.1.1.7. (my previous server was rather 1.1.1.6.8) and I copied my old catalogue, with analysis, dashboard, etc. on this new server.

  Now, if I try right-click on a table or a PivotTable, I can't see all the options in my context menu: I just "move to" and the label of the measure, but not 'show the subtotal', 'Create a group', 'Create calculated item', 'delete' or 'keep only '.

  If I try to change my analysis, in the results panel, I see all the menu items: but no, if I try to do the same thing from the published dashboard.

  Is there something that I missed during the installation of the new server?

  In my old server 1.1.1.6 the menu works fine.

  Any suggestion?

  Thank you

  Luke

  solved

  I miss also update instanceconfig.xml

• implementation of SSO with r12

  Hello Experts,

  I must apply sso with our installation r12.

  the details are:

  Operating system: HP-UX Itanium

  EBS: 12.1.3

  DB: 11.2.0.2

  Next Note: Integration Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On [376811.1 ID]

  According to the note, need to install 10 g AS (10.1.4.0.1)

  can it go to 10.1.4.0.3

  I am facing problem to download s/w for 10g As.

  http://www.Oracle.com/technetwork/middleware/IAS/downloads/101401-099957.html

  but not able to understand which I take download to do the first installation. (10.1.4.0.1)

  Please suggest.

  Thanks in ADV!

  Hello

  The issue is discussed previously and answered in the forum, please visit:

  https://forums.Oracle.com/message/10403374

  HTH!

  Thank you &

  Best regards

• Hyperion 11.1.2.3 integrate with Obiee 11.1.1.7.1

  Hi all

  I installed Hyperion 11.1.2.3 and Obiee 11.1.1.7.1 then try to integrate with hyperion obiee.

  When I try to do the follow-up,

  HSSConfiguration.bat registry

  getting below error:

  Exception in thread "main" java.lang.NoClassDefFoundError: com/hyperion/css/ESSC

  Xception

  at oracle.bi.server.hssregistration.BIEERegisterer.execute (BIEERegistere

  r.Java:70)

  at oracle.bi.server.hssregistration.BIEERegisterer.main (BIEERegisterer.j

  AVA: 138)

  Caused by: java.lang.ClassNotFoundException: com.hyperion.css.CSSException

  in java.net.URLClassLoader$ 1.run(URLClassLoader.java:202)

  at java.security.AccessController.doPrivileged (Native Method)

  at java.net.URLClassLoader.findClass(URLClassLoader.java:190)

  at java.lang.ClassLoader.loadClass(ClassLoader.java:306)

  to Sun.misc.Launcher$appclassloader$ AppClassLoader.loadClass (Launcher.java:301)

  at java.lang.ClassLoader.loadClass(ClassLoader.java:247)

  ... 2 more

  CSS.jar and registry - api .jar files copied from way of Hyperion obiee as mentioned below in the blog of John:

  http://John-Goodwin.blogspot.in/2013/05/EPM-workspace-integration-with-OBIEE.html

  If someone has this problem, please comment.

  Thank you

  Mady

  Did you really follow all stages of http://john-goodwin.blogspot.co.uk/2013/04/epm-workspace-integration-with-obiee.html

  Did you properly tracking registration.properties, did you update ORACLE_BI_HOME, ORACLE_HOME, JAVA_HOME in HSSregistration.bat, is the correct reg.properties being produced in the same location as the HSSregistration utility.

  Yes, you enter the user name of the Shared Services password, as is the register HIT.

  See you soon

  John

  http://John-Goodwin.blogspot.com/

• integration with obiee ClearCase

  Hi all
  
  Do we have a new Oracle tool that integrates into OBIEE to track/migrate to Version control as well as to follow the migration of objects? If this is not the case, can we integrate tools such as ibm clearcase or similar tools with obiee 11 g?
  
  Thank you
  
  Sushil

  Check these
  http://www.rittmanmead.com/2012/02/OBIEE-11-1-1-6-MDS-XML-repositories-and-integration-with-source-control/
  http://www.rittmanmead.com/2009/01/simple-version-control-for-OBIEE-using-Subversion-VisualSVN-server-and-TortoiseSVN/

  If brand aid

• Hyperion integration 11.1.2.2. with OBIEE 11 g and OBIEE 10.1.3.4

  Hi all
  
  I work on the VINE, there is a requirement of the customer into the workspace of Hyperion OBIEE dashboards. Are there documents or links to integrate Hyperion OBIEE 11 g or OBIEE 10.1.3.4 11.1.2.2.
  
  Thank you

  For integration with 10g and then have a read of http://docs.oracle.com/cd/E17236_01/epm.1112/epm_install_1112200/ch05s02s04.html
  E.M.P. 11.1.2.2 does not support currently OBIEE via the workspace, but I believe that 11.1.2.3 will support the integration of the workspace with OBIEE 11.1.1.7, also I think that there could be a patch to make it work with 11.1.2.2, I can't confirm when it will be available as well.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• Siebel Marketing integrated with OBIEE, data transformations

  Hi all
  We are working on Siebel 8.1 and OBIEE 10.1.3. I have here two doubts.
  1. after integration with OBIEE in Siebel CRM segmentation, create us a campaign, build a contact with OBIEE segmentation segment.
  My question is how campaign Siebel CRM to get information on the segment result OBIEE subscribers (i.e. how Siebel data linking the result of segmentation OBIEE data)?
  All configurations passing contact id of the side OBIEE for Siebel Siebel ROW_ID?
  
  2. If Siebel CRM requires a segmentation of OBIEE contactid,
  can load us external data (not in Siebel CRM) under the criteria of segmentation for contact segment OBIEE side?
  
  All point about that, guys?
  Thank you!
  Vince

  Check below for the design of load formats:

  http://docs.Oracle.com/CD/E14004_01/books/MKTG_InstallAdmin/MKTG_InstallAdminTOC.html

  and this one to use the features of marketing:

  http://docs.Oracle.com/CD/E14004_01/books/MKTG_User/MKTG_UserTOC.html

  Good luck
  Antonio
  BExpert, Brazil