My Oracle Support Banner

MSAD Groups Not Working in EPM 11.1.1.3 With ObjectGUID Which Worked with Distinguished Names. (Doc ID 1229285.1)

Last updated on SEPTEMBER 19, 2018

Applies to:

Hyperion BI+ - Version 11.1.1.3.00 and later
Information in this document applies to any platform.

Symptoms

In Hyperion Shared Services (HSS) when opening any MSAD group, an error occurs ("Unable to process request"). Showing the group memberships of MSAD users also brings the error. Provisioning put on those groups is stored but then not found and does not work. MSADGroupChildren error in Shared Services Security log. Provider configuration is with standard ObjectGUID as ID, sAMAccountName as login attribute.

The old 9.3.1 environment had the same config, but used distinguished name (DN) as ID attribute, this also worked after that environment was upgraded to EPM 11.1.1.3 keeping the DN. But on the newly installed 11.1.1.3 environment groups are shown but do not work. Same group OUs and filters used as before.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.