OBIEE 11g: Configuring Authentication and SSO with Active Directory and Windows Native Authentication (Doc ID 1274953.1)

Last updated on MAY 08, 2023

Applies to:

Purpose

This paper examines how to configure Oracle Business Intelligence Enterprise Edition (OBIEE) 11g to use Windows Server Active Directory (AD) as an LDAP Authentication source and how to use Windows Native Authentication (WNA) in an SSO environment.

The aim is to describe the configuration and set up required so that users may log on to their Windows PCs and access OBIEE via a standard web browser with no further authentication required on their part. Windows Native Authentication and Oracle Weblogic will be authenticating users to OBIEE using their standard network log ins without further troubling authorised users of the system.

There are several steps to be performed in Active Directory itself, in the Weblogic Server hosting OBIEE, in the OBIEE web app and finally on the client machine(s) from which you wish users to access OBIEE using Windows Native Authentication SSO.

The steps in this document have been tested with OBIEE version 11.1.1.3.0 and Active Directory 2008 (Windows Server 2008).

This document applies to all OBIEE 11.1.1.x versions.

Note that there are some additional steps to enable Smartview with this mechanism.  These steps apply to Oracle BI 11.1.1.7.1 and later.  These steps are documented in doc ID 1900485.1.

Scope

OBIEE Administrators. This requires in-depth knowledge of Windows Native Authentication /. Kerberos workings.

Details

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.