Oracle Exalytics With Active Directory (AD) Authentication And Database Authorization Not Showing Expected Groups in OBIEE My Account Settings
(Doc ID 1513032.1)
Last updated on JANUARY 05, 2015
Applies to:Oracle Exalytics Software - Version 184.108.40.206.0 to 220.127.116.11.0 [Release 1.0]
Business Intelligence Suite Enterprise Edition - Version 18.104.22.168.0 to 22.214.171.124.4 [Release 11g]
Information in this document applies to any platform.
Environment includes Oracle Exalytics Patchset 1 (PS1) with OBIEE 126.96.36.199.4. User Authentication is via Windows Active Directory (AD) and OBIEE authorization is being done via a database table.
The configuration is set up similar to that described in Section 3.4.3 Configuring a Database as the Authentication Provider of the Oracle Fusion Middleware Security Guide for Oracle Business Intelligence Enterprise Edition 11g Release 1 (11.1.1), Part Number E10543-06.
Custom templates (adapter_template_usergroup1.xml and adapter_template_usergroup2.xml) were created and copied to the <MW_HOME>/oracle_common/modules/oracle.ovd_11.1.1/templates/ directory on the Exalytics server. A custom Web Logic authenticator (“MyBISQLGroupProvider”) was also created. As part of this configuration, users and groups have been defined in the database tables and application roles have been mapped to the user groups.
When testing this setup, users are able to login to OBIEE Presentation Server but unable to see all the groups and roles that are expected.
For example, User A logs in and selects My Account and expects to see "AuthenticatedUser, BIAdministrator and BIConsumer" Role. However, only "AuthenticatedUser and BIConsumer" are displayed and BIAdministrator privilege is missing.
This security has been set up in a standalone OBIEE 188.8.131.52.4 environment and is working as expected. In the standalone system, User A logs in and checks My Account and sees all expected roles: "AuthenticatedUser, BIAdministrator and BIConsumer."
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!