1537480 - Best Practice: How To setup Active Directory Single Sign On when BOE CMS is on Unix or Linux for XI 3.1 SP3 and higher

• When the BusinessObjects CMS is installed on a Unix server there does not exist a Windows Active Directory (AD) authentication option however, there is a need to configure AD Single Sign On (SSO).
• Please NOTE: If you have a time sensitive deadline the following steps were created in a single support Linux test environment. It combines portions of 3 types supported SSO technology from trusted authentication, LDAP to AD, and kerberos SSO. It has not been tested in large scale by many customers at this point. The configuration and deployment can be complex depending on many environmental factors as well as combining these 3 solutions. When working with support on this solution please allow extra time for successful deployment as we can run into unexpected issues. The authentication team does not have expertise in unix/linux OS support, tomcat, other web/app servers, , and it may be required to generate multiple support messages for successful implementation
• This is currently the only solution for unix/linux SSO that doesn't require any 3rd party productucts to be installed external to BOE 3.1 (i.e. jakarta, siteminder, web portals, etc)

This configuration has been proven to work in XI 3.1 any service pack (SP) however it is recommended that XI 3.1 SP3 and higher is used.

zie vintela ventilla vintila quest silent sign-on automatic logon , KBA , htkba , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , How To