Académique Documents
Professionnel Documents
Culture Documents
Overview
The purpose of this document is to demonstrate the steps to follow to
configure Business Objects XI for use with Active Directory SSO.
Contents
INTRODUCTION ............................................................................................ 2
CONFIGURE ACTIVE DIRECTORY ON WINDOWS 2003 SERVER AS PRIMARY
DOMAIN CONTROLLER................................................................................. 2
INSTALL AND CONFIGURE BUSINESS OBJECTS XI TO AUTHENTICATE AGAINST
ACTIVE DIRECTORY ..................................................................................... 5
FINDING MORE INFORMATION ..................................................................... 12
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 1
Introduction
Configuration of Business Objects XI with Active Directory is a two-step
process:
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 2
AD-SSO_BOXI.pdf
Click on “Add or remove a role.” The following screen appears:
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 3
AD-SSO_BOXI.pdf
Click Next. This will bring up a list of roles available for this server:
This will initiate a wizard to install Active Directory on the server and
walk you through installing AD and making this server a Domain
Controller.
Since there is no DNS Server installed on this machine, the wizard will
prompt for installing a DNS Server. Select “Yes” to install and configure
the DNS Server.
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 4
AD-SSO_BOXI.pdf
Once Active Directory is installed and configured, users and groups can
be added to Active Directory by going into Start >All Programs >
Administrative Tools > Active Directory Users and Computers.
The following dialog box allows you to add and modify users in Active
Directory.
a) Configure IIS
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 5
AD-SSO_BOXI.pdf
a) Configure IIS
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 6
AD-SSO_BOXI.pdf
The next step is to Configure IIS for NTLM Authentication
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 7
AD-SSO_BOXI.pdf
iv) Click Edit for the “Authentication and Access Control”
box.
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 8
AD-SSO_BOXI.pdf
b) Configure web.config file to point to Active Directory
<WebDesktopSettings>
<add key="cmsDefault" value="CMSMachineName" />
<add key="ssoEnabled" value="true" />
<add key="authenticationDefault" value="secXXXXXXX" />
<!-- Default Authentication progID (secEnterprise, secLDAP, SecWindowsNT,
secWinAD) -->
</WebDesktopSettings>
<system.web>
<identity impersonate="true" />
<authentication mode="Windows" />
</system.web>
NOTE
Known Limitation:
The Central Management Console (CMC) is not supported by SSO. In
place of SSO, use a third-party tool, such as SiteMinder.
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 9
AD-SSO_BOXI.pdf
c) Configure the Central Management Console (CMC).
Add the group ‘FINANCE’ created in the last step of configuring Active
Directory earlier in this document to the Mapped AD Member group.
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 10
AD-SSO_BOXI.pdf
d) Log into InfoView
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 11
AD-SSO_BOXI.pdf
Finding more information
For more information and resources, refer to the product documentation
and visit the support area of the web site at:
http://www.businessobjects.com/
www.businessobjects.com
No part of the computer software or this document may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system,
without permission in writing from Business Objects.
The information in this document is subject to change without notice. Business Objects does not warrant that this
document is error free.
This software and documentation is commercial computer software under Federal Acquisition regulations, and is
provided only under the Restricted Rights of the Federal Acquisition Regulations applicable to commercial computer
software provided at private expense. The use, duplication, or disclosure by the U.S. Government is subject to
restrictions set forth in subdivision (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at
252.227-7013.
The Business Objects product and technology are protected by US patent numbers 5,555,403; 6,247,008;
6,578,027; 6,490,593; and 6,289,352. The Business Objects logo, the Business Objects tagline,
BusinessObjects, BusinessObjects Broadcast Agent, BusinessQuery, Crystal Analysis, Crystal Analysis
Holos, Crystal Applications, Crystal Enterprise, Crystal Info, Crystal Reports, Rapid Mart, and
WebIntelligence are trademarks or registered trademarks of Business Objects SA in the United States
and/or other countries. Various product and service names referenced herein may be trademarks of
Business Objects SA. All other company, product, or brand names mentioned herein, may be the
trademarks of their respective owners. Specifications subject to change without notice. Not responsible for
errors or omissions.
23-Feb-2006 1:59:00 PM Copyright © 2006 Business Objects. All rights reserved. Page 12
AD-SSO_BOXI.pdf