1483762 - Configuring Manual Kerberos Authentication and/or SSO in Distributed Environments with XI 3.1 SP3 ***Best Practice***

• This solution REQUIRES XI 3.1 SP3
• If SP3 is not installed then please use KB 1261835 instead
• If you are on BI 4.0 4.1 or 4.2 + see KBA 1631734
• How to setup XI 3.1 with Active Directory Authentication and single sign on with kerberos
• Configuration Guide for AD SSO

Read more...

• This document applies to XI 3.1 SP3 and later ONLY, it will not work on earlier versions

What's new in SP3

• The vintela libraries that we used to use from XIR2 - XI 3.1 SP2 have been replaced with the latest version from quest
• Constrained Delegation with java kerberos is now fully supported (although please constrain after initial configuration)
• ktpass is no longer needed to modify the UPN of the service account
• server tracing no longer requires keytab removal
• AD sites no longer need to be specified (they are choosen automatically like following the rules of any windows server)
• Overall the new document will simplify the entire process and allow quicker implementation of kerberos SSO
• Over 10 known bugs (which used to be worked around in the old version) have been resolved
• vintela is now known as, and commonly referred to as java SSO going forward

Crystal Reports Server 2008 V1 ; SAP BusinessObjects Business Intelligence Edge 3.1, standard package ; SAP BusinessObjects Business Intelligence platform 4.0 ; SAP BusinessObjects Business Intelligence platform 4.0, feature pack 3 ; SAP BusinessObjects Enterprise XI 3.1

• how to configure directions documentation documents steps to follow vintela ventila vintella ventela set up setup config configuring Active Directory single sign on sign-on slient automatic logon
• java tomcat websphere weblogic oracle application server jboss netweaver JDK java SDK development kit XI3 XI 3  XI 3.1 XI31 XIR3 XI 3.x zie MNHWW master KBA mkba mkb htkba htkb

, KBA , biauth , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , How To