My Oracle Support Banner

MSAD Groups Not Working in EPM With ObjectGUID Which Worked with Distinguished Names. (Doc ID 1229285.1)

Last updated on DECEMBER 02, 2019

Applies to:

Hyperion BI+ - Version and later
Information in this document applies to any platform.


In Hyperion Shared Services (HSS) when opening any MSAD group, an error occurs ("Unable to process request"). Showing the group memberships of MSAD users also brings the error. Provisioning put on those groups is stored but then not found and does not work. MSADGroupChildren error in Shared Services Security log. Provider configuration is with standard ObjectGUID as ID, sAMAccountName as login attribute.

The old 9.3.1 environment had the same config, but used distinguished name (DN) as ID attribute, this also worked after that environment was upgraded to EPM keeping the DN. But on the newly installed environment groups are shown but do not work. Same group OUs and filters used as before.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.