MSAD Groups Not Working in EPM 11.1.1.3 With ObjectGUID Which Worked with Distinguished Names. (Doc ID 1229285.1)

Last updated on SEPTEMBER 19, 2018

Applies to:

Symptoms

In Hyperion Shared Services (HSS) when opening any MSAD group, an error occurs ("Unable to process request"). Showing the group memberships of MSAD users also brings the error. Provisioning put on those groups is stored but then not found and does not work. MSADGroupChildren error in Shared Services Security log. Provider configuration is with standard ObjectGUID as ID, sAMAccountName as login attribute.

The old 9.3.1 environment had the same config, but used distinguished name (DN) as ID attribute, this also worked after that environment was upgraded to EPM 11.1.1.3 keeping the DN. But on the newly installed 11.1.1.3 environment groups are shown but do not work. Same group OUs and filters used as before.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.