How to enable AD authentication on the Web Platform
Symptom
You want 360Suite Web Platform to use AD authentication the same way Business Objects does.
Environment
- 360Suite Web Platform
- SAP BusinessObjects Business Intelligence 4.1
- SAP BusinessObjects Business Intelligence 4.2
Resolution
As part of the AD authentication configuration on the Business Objects server, two files will have been created and saved on “C:\Windows\” directory (default).
- bscLogin.conf
- krb5.ini
- Copy these two files from the Business Objects server and paste them on the 360Suite Web Platform server the same directory, in the same directory, i.e. C:\Windows\.
- Open the 360Suite Web Platform Tomcat options, navigate to the Java tab and add the following lines to the Tomcat Java Options:
-Djava.security.auth.login.config=C:\Windows\bscLogin.conf -Djava.security.krb5.conf=C:\Windows\krb5.ini
3. Navigate to the Log On tab and enter the AD Service Account Tomcat will use:4. Click OK.5. Restart the 360Suite Web Platform Tomcat for chnages to take effect.
See also
- SAP BusinessObjects Administrator Guide - Authentication section.
- SCN blog for AD + SSO configuration: https://blogs.sap.com/2016/09/02/sso-configuration-with-active-directory-sap-business-objects-42-aes-encryption/
- For SSO setup and configuration (including trusted SSO) - see Appendix C in the 360Suite installation guide.
Keywords
Active Directory, authentication, Tomcat
Product
Product or Product version
- 360Suite Web Platform
Languages
- English US
- English UK
- French
Last updated over 4 years ago