1830900 - Best Practice: How To setup Explorer for Active Directory Single Sign On when BOE CMS is on Unix or Linux for BI4

• When the BusinessObjects CMS is installed on a Unix server there does not exist a Windows Active Directory (AD) authentication option however, there is a need to configure AD Single Sign On (SSO).
• This is currently the only solution for Unix/Linux SSO that doesn't require any 3rd party products to be installed external to BOE (i.e. Jakarta, SiteMinder, web portals, etc)
• Please NOTE: If you have a time sensitive deadline the following steps were created in a single support Linux test environment. It combines portions of 3 types supported SSO technology from trusted authentication, LDAP to AD, and kerberos SSO. It has not been tested in large scale by many customers at this point. The configuration and deployment can be complex depending on many environmental factors as well as combining these 3 solutions. When working with support on this solution please allow extra time for successful deployment as we can run into unexpected issues. The authentication team does not have expertise in Unix/Linux OS support, tomcat, other web/app servers and it may be required to generate multiple support messages for successful implementation.

This configuration has been proven to work in BI 4 Support Pack 4

KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , How To