SAP Knowledge Base Article - Preview

1483762 - Configuring Manual Kerberos Authentication and/or SSO in Distributed Environments with XI 3.1 SP3 ***Best Practice***


  • This solution REQUIRES XI 3.1 SP3
  • If SP3 is not installed then please use KB 1261835 instead
  • If you are on BI 4.0 4.1 or 4.2 + see KBA 1631734
  • How to setup XI 3.1 with Active Directory Authentication and single sign on with kerberos
  • Configuration Guide for AD SSO



  • This document applies to XI 3.1 SP3 and later ONLY, it will not work on earlier versions

What's new in SP3

  • The vintela libraries that we used to use from XIR2 - XI 3.1 SP2 have been replaced with the latest version from quest
  • Constrained Delegation with java kerberos is now fully supported (although please constrain after initial configuration)
  • ktpass is no longer needed to modify the UPN of the service account
  • server tracing no longer requires keytab removal
  • AD sites no longer need to be specified (they are choosen automatically like following the rules of any windows server)
  • Overall the new document will simplify the entire process and allow quicker implementation of kerberos SSO
  • Over 10 known bugs (which used to be worked around in the old version) have been resolved
  • vintela is now known as, and commonly referred to as java SSO going forward


Crystal Reports Server 2008 V1 ; SAP BusinessObjects Business Intelligence Edge 3.1, standard package ; SAP BusinessObjects Business Intelligence platform 4.0 ; SAP BusinessObjects Business Intelligence platform 4.0, feature pack 3 ; SAP BusinessObjects Enterprise XI 3.1


  • how to configure directions documentation documents steps to follow vintela ventila vintella ventela set up setup config configuring Active Directory single sign on sign-on slient automatic logon
  • java tomcat websphere weblogic oracle application server jboss netweaver JDK java SDK development kit XI3 XI 3  XI 3.1 XI31 XIR3 XI 3.x zie MNHWW master KBA mkba mkb htkba htkb
, KBA , biauth , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.