MSAD Groups Not Working in EPM 11.1.1.3 With ObjectGUID Which Worked with Distinguished Names.

(Doc ID 1229285.1)

Last updated on AUGUST 08, 2016

Applies to:

Hyperion BI+ - Version 11.1.1.3.00 and later
Information in this document applies to any platform.

Symptoms

In Hyperion Shared Services (HSS) when opening any MSAD group, an error occurs ("Unable to process request"). Showing the group memberships of MSAD users also brings the error. Provisioning put on those groups is stored but then not found and does not work. MSADGroupChildren error in Shared Services Security log. Provider configuration is with standard ObjectGUID as ID, sAMAccountName as login attribute.

The old 9.3.1 environment had the same config, but used distinguished name (DN) as ID attribute, this also worked after that environment was upgraded to EPM 11.1.1.3 keeping the DN. But on the newly installed 11.1.1.3 environment groups are shown but do not work. Same group OUs and filters used as before.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms