SAP Knowledge Base Article - Preview

2190831 - How to enable SSO for CMC in BI 4.1 SP6

Symptom

It was mentioned in the BI 4.1 admin guide, and the What's new that CMC now supports SSO

Important NOTE! This enhancement is not always desirable you must weigh the risk with the convenience in your own environment 

  • If an attacker gains access to an OS they will have full admin access to BI (this is why Microsoft recommends that admins only logon with their admin account to perform tasks) With CMC SSO you will be allowing admin logon ALL the TIME
  • SSO on occasion has issues, one of the 1st things to do is logon to the CMC to resolve, now if SSO fails logon to the CMC will not be possible until SSO is disabled and web/app restarted
  • currently there is no logonNoSso option for CMC but you can try using the URL http://<server>:<port>/BOE/CMC/logon.faces?skipSso=true for users that cannot use SSO or to bypass it to logon with enterprise
  • This feature is very new so more issues will be listed as we become aware of them.


Read more...

Environment

SAP BusinessObjects Business Intelligence Platform 4.1 SP6

Product

SAP BusinessObjects Business Intelligence platform 4.2

Keywords

zie htkba biauth single sign on sign-on automatic logon trusted authentication vintela kerberos AD login , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , BI-BIP-DEP , Webapp Deployment, Networking, Vulnerabilities, Webservices , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.