OBIEE 11g and SSO with Browser Cookie

In OBIEE 10g we were able to configure the Presentation Server to accept a browser cookie. The cookie value would be passed to the BI Server as the :USER variable. A BI Server Repository Initialization Block would execute a SQL SELECT statement which would return the PeopleSoft username based on the cookie value.
We added the following to the 10g instanceconfig.xml:
<CredentialStore>
<CredentialStorage type="file" path="D:\oracle\OBIEE_UD\Data\web\config\credentialstore.xml" passphrase="another_secret" />
</CredentialStore>
<Auth>
<SSO enabled="true">
<ParamList>
<Param name="IMPERSONATE" source="cookie" nameInSource="PS_TOKEN"/>
</ParamList>
</SSO>
</Auth>
The Initialization Block SQL is:
SELECT mGetTokenUserid(':USER') FROM DUAL
mGetTokenUserid is a PL/SQL function which invokes a PeopleSoft web service. The web service simply returns the username for a valid PS_TOKEN cookie.
The Initialization Block works fine in OBIEE 11g.
Unfortunately the instanceconfig.xml settings from 10g do not work in 11g. There is also nothing in the OBIEE 11g documentation which discusses how to tell the system to use a specific cookie value for authentication.
Any guidance as to where in the Fusion Middleware or WebLogic security documentation we might find details on how to get the system to pass the PS_TOKEN cookie to the BI Server in 11g?
Thanks,
Mark Johnson
State of Minnesota

Not a full answer but....
, WebLogic can accept third party tokens as defined here:
http://download.oracle.com/docs/cd/E14571_01/web.1111/e13718/ia.htm#DEVSP258

Similar Messages

Obiee 11g and custom j2ee app using the same cookie name

Hi,
I wrote a same j2ee web application. i'am using authentification through a realm configured in the web.xml.
This web app is deployed in the same weblogic than obiee 11g. What i want to do is to embed my application in a dashboard using an iframe tag, and use the same login from analytics to my custom web app.
In this article http://docs.oracle.com/cd/E11035_01/wls100/security/thin_client.html#wp1039551, it is said that by default, all web apps in the sames weblogic server are using the same cookie name so that they share authentification between them. However, i have read in the web that analytics in obiee 11g is using a cookie with the name "ORA_BIPS_NQID".
In the weblogic.xml of my custom application, i set the cookie-name parameter to ORA_BIPS_NQID. However, in the dashbord, it still prompt for authentification to my custom web app.
How can we share authentification between analytics and a custom web app in the same weblogic ?
NB : I dont want to pass the username et password through the url.
Thanks.

By default, if you don't specify a cookie-name in the weblogic.xml configuration file, the weblogic server create a cookie named JSESSIONID for your application. For exemple, if two applications use the default configuration, both of them will use the same cookie name which is JSESSIONID. In this case, when you log in the first application, your are automaticaly logged in the second application with the same credentials. I have already test this kind of integration and it works perfectly. You only need that the two applications are deployed in the same weblogic server.
Now, i want to have the same behaviour between obiee 11g and my custom application deployed in the same weblogic server. I read somewhere in the web that obiee 11g presentation service (analytics) is configured with a cookie-name value = "ORA_BIPS_NQID". So in the weblogic.xml configuration file of my web app, i specify a cookie-name value = "ORA_BIPS_NQID" to have the same cookie-name between the two application. But, it still not work. It prompt for authentification in the dashboards.
I now, that such an integration is possible, because the other bi applications (mapviewer, bipublisher,...) are actually other web applications. However when using, for exemple, maps in dashbords, the mapviwer application automaticaly user the credentials of the user connected in analytics.

Upgrade ERP database 11g and ATG7 with SSO integation

Please let us know how to Perform Upgrade ERP database 11g and ATG7 with SSO integation .
Regards .

We have completed to upgrade ERP database from 9.2.0.6 to 11.2.0.1 and also apply ATG 7 on Test instance.
And user finish testing , there is no issue after upgrade and application can work as normal.
On Test instance we didn't implement Single Sign On
But on Production we have Single Sign ON.
Now we plan to upgrade on Production instance. But we afraid that we will found any issue on Production relate to SSO. Becase we don't have a chance to test it.
My question is:
Are there any spacial step we need to do if we have implemented SSO After upgrade DB 11g and ATG 7?

Scheduling a report in OBIEE 11g and BI Publisher

HI Everyone,
I have a report. Now i want to schedule this report on monday, tuesday for first week, and monday , tuesday, wednesday for second week , monday, tuesday, wednesday for third week.... etc., like this i want to schedule. Can anyone please help me how This i have to implement for a report in OBIEE 11g, And another report , i have to schedule in the same manner in BI Publisher. Please help me out .,.,.,.
Regards
....

Hi Everyone,
I dint get the proper answer to schedule a report which i want it exactly. Let me explain clearly.., Take a month of march, if a schedule a report, it has to schedule like, iin 1st week of march it has to deliver for first two days, in 2nd week, it has to deliver for first three days etc.,.,.,.
Regards...

OBIEE 11g - create dashboard with Answers Analyse and BI Publisher Repport

Hi there,
I have one question . I create dashboard in OBIEE 11g .In my dashboard have one analyse and one bip report .I create one prompt filter , that changes the both .But I wanted when i click in analysis and change it, this change is reflected in the Report . Is this possible?
Thanks

I am talking about object permissions in the catalog (eg. Folder permissions..). This is in addition to the permissions for the data source.
You need to be able to view the folders from where you can select the analysis as a data source in the BI publisher report.
Here is an excerpt from the Guide:
For a role to access an object in the catalog, the role must be granted Read permissions on both the object and the folder in which the object resides. Permissions can be granted at the folder level and applied to all the objects and subfolders it contains, or applied to individual objects.
To grant catalog permissions to a role:
Navigate to the Catalog.
Locate the folder or object on which you wish to grant permissions and click More. From the menu, select Permissions. Alternatively, you can select the folder and click Permissions in the Tasks region.
Thanks,
BIPuser

OBIEE 11g: how to automate browser clearing cache

Hi,
We upgraded OBIEE 10g to 11g the implementation includes EBS SSO ( which works in 10g).
the SSO functions OK meaning when we login from ERP Bussiness selection responsibilities to the OBIEE dashboard page we can access it and the login succeed.
The thing is that when we change the responsibility to another responsibility the Application role of the user does not updated and the old role ( the user get again the first role that was assigned in the first login ) meaning the role was not changed with the new responsibility.
I think that browser cache find OBIEE session and connect to the session without call /* valueof(NQ_SESSION.ACF) */ APP_SESSION.validate_icx_session('valueof(NQ_SESSION.ICX_SESSION_COOKIE)')
So, to automate browser clearing cache ?
Thank you

Thank you Veeresh,
I think this situation is due to a feature of Weblogic
"+The browser caches user credentials and frequently re-sends them to the server automatically. This can give the appearance that WebLogic Server sessions are not being destroyed after logout or timeout. Depending on the browser, the credentials can be cached just for the current browser session, or across browser sessions.+"
[http://docs.oracle.com/cd/E23943_01/web.1111/e13711/thin_client.htm#i1033402].
I understand the advantage that helps to not make the login process more unnecessary. But I have to disable the feature, otherwise the end-user will not be able to change permission on BI /ERP responsibility and will have totally close the browser. The question is how to disable it (Weblogic feature) ?
Thank you,
Ark

OBIEE 11g having problems with password protected PDF files.

I have been able to get an analysis in OBIEE 11g to display PDF files.
However, some of these documents contain sensitive information and must be secured. Since anyone with access to the file name
could simply type in the proper path in the browser window, this is unacceptable. In order to try and prevent this, I created a pdf file
that is protected with a password.
Opening the file by itself, produces the desired results. The password is requested before the file will open.
When I open the file through my analysis in OBIEE, Adobe reader activates, but the password is not requested and the file does not open.
It is as if OBIEE is somehow not sensing that Adobee is asking for a password.
Does anyone have any experience with this?

FYI, in case anyone is interested, I found out what is going on.
I created the original password protected PDF using Microsoft Word. I did this because I do not have a full version of Adobe Acrobat that allows me to create files.
On a hunch, I found someone that has a full version of Acrobat, and had them create a password protected PDF file. This file worked perfectly.
Apparently, Word is not strictly adhering to PDF guidelines, and OBIEE senses the differences, resulting in the file not opening properly.
Something to keep in mind for anyone linking to password protected PDF files in OBIEE.

OBIEE 11g and Essbase and Dimension Filter / Selection Steps

We are doing a prototype using OBI 11g with Essbase 11.1.2 as a datasource. Our prototype consist of several reports, graphs and dashbaords. The Essbase cube is an ASO cube with 12 dimensions. Most of our dimensions are ragged/unbalanced so we have set up the dimension type to be "Value" in the RPD. There is one dimension - Product and it is a ragged dimension. We are trying to create a simple report that has level zero products as rows. This is something pretty easy to do in Essbase Financial Reporting but it does not look like there is an easy way to filter only on the Level 0 members of a particular dimension. I have tried with selection steps as well as changing the dimension back to unbalanced without much luck.
Has anyone out there done something similar before? Thx.

Hi user,
Check this out OBIEE 11g - Essbase connection Failed
And 1 more thing admin tool works only for 32-bit ...but not in 64 bit.So ensure you install 32-bit for admin tool.
UPDATED POST
Jacob->its same for stand alone application also,it works only on 32-bit
hope helps you.
Cheers,
KK
Edited by: Kranthi.K on Mar 7, 2011 9:00 AM

OBIEE 11g and Weblogic on different Servers

Hi every
Can we install OBIEE 11g on one server and weblogic and another server?
How to indicate in obi configuration, that weblogic is on another server?
Is there a manual or link that prove it?
I appreciate your prompt replies
Regards
Pedro

Install BIServer and BIPresentaionServer on one server and deploy BIPS plug-in on Weblogic server where it is installed,so the both will talk with the weblogic server.

OBIEE 11g and Weblogic on different Servers - Windows 2008 R2

Hi
Can we install OBIEE 11g(BI Server and Presentation Servers) on one server and weblogic and another server. We have a requirement where we need to differentiate all the components on to its own server for performance reasons. How can we do the configurations if we have installed on how to talk to weblogic after the installations.
Thanks

Yes we can do that
a) Install BIS and BIPS on one server and deploy BIPS plug-in on Weblogic server where it is installed,so the both will talk with the weblogic server.
http://docs.oracle.com/cd/E10415_01/doc/bi.1013/e10417.pdf
Mark if it helps

Mapping Roles/Groups between OBIEE 11g and Oracle EBS R12

Hi,
We are implementing OBIEE 11g with Oracle EBS R12 as source system. Also we are using Out of the box RPD for Oracle EBS R12.
But we are facing lot of challenges to map OBIEE 11g groups and EBS roles and responsibilities. We do not have prior experience with EBS as source system.
Can anyone tell how to map between obiee groups with Oracle E-Business suit R12
Is there any document link or notes regarding this.
Any help regarding this will really save us.
Thanks in advance

Please read:
Integrating with EBS Suite Security: http://docs.oracle.com/cd/E28280_01/bi.1111/e16364/ebs_actions.htm#BIEIT1321
As I understand you need to create a Connection Pool to your EBS database. I think that would be a serious security aspect for the integration to work over two different networks. But I don't think it's impossible.
Domain Prerequisites is another challenge in this scenario.
More specifically: http://docs.oracle.com/cd/E28280_01/bi.1111/e16364/ebs_actions.htm#CHDHCAFD

OBIEE 11g and 7962

All,
I have a rookie question for the experts. We are in the process of installing OBIEE, OBIA, Informatica and DAC. The client wants to go with OBIEE 11g, but the current OBIA is not certified (yet). I see no reference to OBIA in the 11g release of OBIEE. That raised this question: "is it because it is not certified for 11g or is it because OBIA is embedded in the 11g version of OBIEE"? I am guessing it's because a certified combo is not available, but I did not want to overlook anything on a bad assumption.
Thanks for any response,
Jeff

OBIA 7.9.6.2 upgrade to OBIEE 11g will be certified from 11gR2 I.e. 11.1.1.4 which will be with us any time in the next few weeks.
Paul

Oracle9iAS R2 - Virtual Hosts with Portal and SSO with OIDDAS application

Hi!
I have installed a the machine with name minsk.discover.local. The machine have installed Infrastructure and Portal. The instalation is sucessfull and i work fine. But i have publish Portal to WEB with name intranet.discover.com.br. The Oracle describe:
1 - Create the virtual hosts in SSO and PORTAL - OK
2 - run ptlasst to create SSO Partners Applications - OK
After this steps iwork fine with Portal and SSO, but when i click in portlet to create user to access the application OIDDAS, the Portal redirect to login page of SSO in address mct.com.br, the internal name, when then name not responde in the internet.
I need a help!!!!
Marcio Mesti

I just spoke to the Oracle App server admins, the two servers in question are clustered.
So my question changes slightly to:
What is the best way to install and configure a webgate for clustered Oracle App servers with mulitple virtual hosts, that are residing behind a load balancer (Traffic Manager)?
Thanks,
Andy

Essbase as a source in OBIEE 11g and using lookup to Relation database

Hello All,
We are trying to implement Essbase as primary source for our obiee 11g repository and using relational database as secondary source of data.
I was using a lookup functionality in repository to lookup value from one of the Essbase's Dimension's attribute to relational database, however, there is error when testing this in OBIEE Dashboards.
And tried to look this error in support.oracle and googled it but was not able to find anything on it.
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 43119] Query Failed: [nQSError: 46008] Internal error: File server\Query\Src\SQLookupUtility.cpp, line 145. (HY000)
Have you had any such issue and how can we pass this issue?
I am trying to find if there are any quick resolution before going to oracle support.
TIA.
Parish

Is Essbase 11.1.1.3 supported as a source for OBIEE 11g?From the certification matrix (http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/bi-11gr1certmatrix-166168.xls) we can see that only Essbase 9.3.3+ and 11.1.2+ are supported, not 11.1.1.3
Paul

OBIEE 11g: SAML SSO performance issues

Hi All,
We have implemented IDP initiated SAML2-SSO with SQL Authenticator to get user/group information.
After implementing this we see following issues:
1. Login time takes around 1 minute. In nqserver.log file I can see following message:
[2014-12-22T12:55:09.000-05:00] [OracleBIServerComponent] [NOTIFICATION:1] [] [] [ecid: 0000Kdn8fzjFO99_ndL6iZ1Ka4_f0000FW,0:1:1:6] [tid: 1594] User 'BISystemUser(XXXX)' spent 28720.000000 milliseconds for http response when impersonateUserWithLanguageAndProperties
2. General navigation through application is also slow.
Can you please provide any pointers to fix these performance issues?
Thanks,
Mahipal

I am experiencing performance issues with view selector. It repeats the SQL for each view resulting in duplicate SQL to be run and thus resulting in poor performance of reports. Is this an expected behavior of view selector?
Thanks.

OBIEE 11g and SSO with Browser Cookie

Similar Messages

Maybe you are looking for