User authentication when OBIEE is integrated with EBS

Hello guys
I have a conceptual question about how OBIEE authentication is performed in an integrated environment with EBS? If the goal is to have users access to OBIEE based on their roles given in EBS, what kind of authentication is it needed for such implementation?
Do I import users and group from EBS database or LDAP server (if its available)? what kind of session variable and ini block is created if I want to do data level secuirty based on user groups?
Please give some basic idea and guidelines on topic
Thank you very much

hi,
the final solution must face and fill your needs....
Bi suite has 3 ways of making-having user-groups...
1.manual
2.ldap
3.from external database
If the goal is to have users access to OBIEE based on their roles given in EBS, what kind of authentication is it needed for such implementation?
-->match the roles from EBS to your liked in OBIEE
check and this,
http://it.toolbox.com/blogs/eye-on-obi/oracle-bi-applications-obiee-security-integration-with-oracle-ebusiness-suite-17246
hope i helped....
http://greekoraclebi.blogspot.com/
///////////////////////////////////////

Similar Messages

OBIEE 11G authentication integration with EBS 11 - is it possible?

Hi experts,
My OBIEE 11.1.1.5 is installed on Linux 64 bit machine.
I've thoroughly performed all the action listed in the guide, but I'm getting the famous 'You are not logged in' message.
Has anybody succeeded to enable security integration between OBIEE 11 and EBS 11?
Thanks in advance,
Alex

Hi Deva,
Thanks for your reply.
I've heard from some people that there's a bug in OBIEE 11.1.1.5 that prevents integration of OBIEE 11 security with EBS 11.
I'm trying to find anyone who actually succeeded to get the thing done.
I used the DeliverBI document as well as the official guide.
Is there any way to "debug" my settings? How can I know - what's wrong?
Thanks,
Alex

OBIEE Installation doc's and integration with EBS 12.0.6.

HI,
I had installed OAS 10g with OSS and OID and integration with EBS R12.0.6.
Now I want to install OBIEE(On Linux) and wants to iuntegrate with SSO.
Please provide me the Master Doc for this and anyother private doc also if any.
thx

Hi,
Check this might be helpful... http://gerardnico.com/wiki/dat/obiee/linux_installation
http://onlineappsdba.com/index.php/2007/10/29/biee-installation-on-linux-business-intelligence-enterprise-edition/
To integrate with EBS check these.....http://it.toolbox.com/blogs/eye-on-obi/oracle-bi-applications-obiee-security-integration-with-oracle-ebusiness-suite-17246
http://obibb.wordpress.com/2010/07/30/integrating-oracle-ebs-and-oracle-bi-ee-part-i/
Thanks,
Srikanth

Do we have OBIEE integrated with EBS

Hi Experts,
Do we have OBIEE integrated with EBS or we have to do it manullly..do we have any docs.
Please suggest..
S

Hi,
Never i have done this but i can show you the path.
[http://it.toolbox.com/blogs/eye-on-obi/oracle-bi-applications-obiee-security-integration-with-oracle-ebusiness-suite-17246]
OBIEE Integration with EBS 11.5.10 or R12 Apps
By,
Kranthi.

Help needed in Apex Integration with EBS

Hi All,
Currently, when trying to integrate with EBS these are the steps I followed.
1) Created apex generate hash and apex launch procedure in APPS DB.
2) Created Profile in Application Developer Responsibility.
3) Saved above profile in system administrator -->Profile -> System and set the site level as http://<hostname>:<Apex port>/pls/apex
4) Created a function in system administrator , type as SSWA plsql function and called the launch procedure and passed parameters as my apex application and page id.
5) Created a Web PL/SQL entry under System Administrator Responsibility -> Security -> Web PL/SQL for the launch procedure.
6) Created menu, responsibility and assigned to the user.
For the APEX application , currently I have not given any login page. The login is through EBS only. I have given logout URL in apex application to EBS Login page. Now my problem is , when I click Logout the session of EBS does not get invalidated. How can I achieve this ?
Secondly, When I give the APEX application URL directly in the browser it will open without asking for the EBS login credential. But I do not want this to happen. I need it to be authenticated through EBS login credential.
Any suggestions would be welcome.
Thanks
Alaka

Hi Scott,
I tried the solution given in this URL.
http://oracledbas.blogspot.com/2008/11/oracle-application-express.html
It is not working for me.. I tried in the forum also.
While creating authentication scheme I gave Oracle EBS Login Page as Session Not Valid URL. But every time I login to EBS and click responsibility then menu which has APEX screen, it is not validating username and password and it redirects to EBS login page which i gave in "session not valid URL" (it is going to a loop.)
Now my problem is when I login to EBS and click responsibility then my APEX screen should validate the EBS login and directly it should open. It should not ask for any other (APEX login)login page. If I paste the APEX application URL in any browser it should ask for EBS login page.
When I logout it should invalidate the session of EBS.
Thanks
Alaka

APEX integration with EBS R12.1.1 - no SSO

I am trying to complete APEX integration with EBS R12.1.1 in simplest way. I have a non authenticated report page that I need to link to through a menu and function on one of the existing forms.
Rod West document
http://www.oracle.com/technetwork/developer-tools/apex/apex-ebs-wp-cabot-consulting-169064.pdf
offers the jsp approach which I like to implement however the jsp will not compile correctly and I am not sure why - I have already fond one error with the code as listed in the document:
ojspCompile.pl compile -s 'LaunchApex.jsp ' retry ---> will not work
ojspCompile.pl compile -s 'LaunchApex.jsp' retry --> will work
compile will fail starting at this point of the code:
PARALLEL COMPILATION: 1
[10389] !!COMPILATION ERROR(0) LaunchApex.jsp:
_LaunchApex.java:70: illegal start of type
if (ctx==null) {
^
has anyone tried this approach and got the jsp to compile with no errors or can you see what is it?
thanks in advance.

Hello Mini:
thanks for the info and I have followed the steps as listed. I am not sure what line is the bad code you listed is on - here is the copy of the jsp I am working with and maybe you can point to a specfic line(s) that need to be changed from what to what.
<%@ page contentType="text/html;charset=UTF-8" %><%--
/* LaunchApex.jsp */
--%><%@ page
import="java.io.*"
import="java.net.*"
import="java.sql.*"
import="javax.servlet.http.*"
import="java.util.Enumeration"
import="java.util.Properties"
import="java.lang.Math"
import="oracle.apps.fnd.common.VersionInfo"
import="oracle.apps.fnd.functionSecurity.Function"
import="oracle.apps.fnd.functionSecurity.RunFunction"
import="oracle.apps.fnd.common.WebAppsContext"
import="oracle.apps.fnd.common.AppsEnvironmentStore"
import="oracle.apps.fnd.common.WebRequestUtil"
import="oracle.apps.fnd.common.ResourceStore"
import="oracle.apps.fnd.security.CSS"
import="oracle.apps.fnd.common.Message"
import="oracle.jdbc.OracleConnection"
import="oracle.jdbc.OraclePreparedStatement"
import="oracle.jdbc.OracleResultSet" %><%!
// Session has to be validated first
WebAppsContext ctx = WebRequestUtil.validateContext(request, response);
if (ctx==null) {
return; }
String cookieName = ctx.getSessionCookieName();
boolean validSession = ctx.validateSession(cookieName);
WebRequestUtil.setClientEncoding(response, ctx);
%>
<html>
<head>
<title>Launch Apex</title>

</head>
<body>
<%
     String p_application = request.getParameter("application");
     p_application = ( p_application==null ? "NONE" : p_application);
     String p_page = request.getParameter("page");
     p_page = ( p_page==null ? "1" : p_page);
     String p_item_names = request.getParameter("item_names");
     p_item_names = ( p_item_names==null ? "" : p_item_names);
     String p_item_values = request.getParameter("item_values");
     p_item_values = ( p_item_values==null ? "" : p_item_values);
     AppsEnvironmentStore m_env = (AppsEnvironmentStore) ctx.getEnvStore();
     try {
          String l_launcher = ctx.getProfileStore().getProfile("APEX_HTTP_SERVER");
          l_launcher = l_launcher + "/pls/apex/f?p=" + p_application + ":" + p_page;
          l_launcher = l_launcher + "::APPS:::" + p_item_names + ":" + p_item_values;
     if (ctx!=null) ctx.freeWebAppsContext();
     response.sendRedirect(l_launcher);
     } //try
     catch (Exception e) {
     out.println("Exception found : <pre>");
     e.printStackTrace(new PrintWriter(out));
     out.println("</pre>");
     } //catch
%>
</body>
</html>
*********

OID Installation Questions pertaining to integration with EBS 11.5.10.2

Our Environment is E-Business Suite 11.5.10.2 and we want to investigate/view OID/SSO in action. Ultimately, we'll attempt to use Microsoft Active Directory as the source (of truth). I had performed OID/SSO integration with EBS about 3 years ago and remember the "overall" scheme, but Oracle's documentation/downloads page has left me thoroughly confused, hence, I am asking those that have been through the process .... THANKS IN ADVANCE
(1) Do I need to install the base AS 10g Infrastructure and Metadata Repository via 10.1.2.0.2 installation or can I go directly to installing OID 10.1.4.0.1 ??
Here is what I believe the steps to be, PLEASE, correct me if I am wrong ...
(1) Install 10.1.2.0.2 Application Server Infrastructure by selecting "Infrastructure and Metadata Repository"
(2) Install 10.1.4.0.1 and select to upgrade an existing 10.1.2.0.2 installation. Once 10.1.4.0.1 has upgraded everything, including the database to 10.1.0.5, I assume that I can simply remove 10.1.2.0.2 through the Oracle Installer. Is this correct ??
(3) Once upgrade to 10.1.4.0.1, I believe that I need to download a Metadata Upgrade Assistant patch, (mrua), and run mrua,sh to upgrade MR to 10.1.4.0.1 which will be apparent by querying app_registry view.
(4) Upgrade 10.1.4.0.1 to 10.1.4.3
The documentation is confusing and hard to find for me. Do these steps seem to accomplish the tasks or am I missing something ??
THANKS IN ADVANCE

I didn't do the install myself but we went straight to installing 10.1.4 Identity Manangement, although I believe that Infrastructure components which underly it are essentially the same as 10.1.2. As far as I know you can't use 10.1.3 because it lacks those infrastucture components.
See MOS Doc 233436.1

OBIEE integrated with EBS: Directly logon to OBIEE without going via EBS route

Hi All,
I want to integrate EBS security with OBIEE without enabling Action Links in EBS.I am taking the following approach
Configuring a Database as the Authentication Provider using FND tables
If the approach is right then should I Configuring a New Trusted User (BISystemUser) also.
Please suggest.
Thanks
SYK

Hello SYK,
Yes you can do that.What is the URL you are trying to use when you are logging via EBS?
Thanks,
Sasi Nagireddy..

OBIEE 10g integration with mapviewer

hello all,
i am trying integrate mapviewer map in obiee dashboard. and i am able to show maps which do not use bi answers data for any kind of interaction (i.e,no "nsdp" section in the map file). this works fine. if i am using any dashboard prompt to filter the map ( for example if want to see a particular county from a statewide map using dashboard prompt as filter) it is giving error as below:
*[MVThemeBasedFOIControl.foiLoaded] MAPVIEWER-05523: Cannot process response from MapViewer server. (MAPVIEWER-06009: Error processing an FOI request.*
Root cause:FOIServlet:Missing IN or OUT parameter at index:: 1)
there are two databases with same set of data. one is poc which was created by some one else. so we had to setup new schema to properly define all the data.
so problem occurs when using new schema as datasource. all the html datasource configurations are properly defined on mapviewer for new data.
followed these steps in setting up new schema:
->initially did not run any scripts nor created mvdemo , started clean and loaded the required tables using map builder from GIS shape files with geometry projected to world_mercator(54004). on the contrary POC schema two geometry columns in each table where one is actual coordinate system from GIS file and then it is projected to world_mercator system and loaded into second column using sql. all the geometry indexes looked similar.
->created all the mapping metadata exactly same as the POC. where all the themes uses world_mercator geometry.
both schemas are on same database. i have no idea of what causing the error when i use dashboard prompts. i am not sure if there are additional steps to be followed in creating database or if something else is missing some where. i have no prior experience with mapviewer and oracle spatial. this is kind of learning curve for me.
please let me know any suggestions or solutions .
regards,
mallik
Edited by: 863261 on Jun 2, 2011 12:33 PM
Edited by: 863261 on Jun 8, 2011 5:49 AM

Hello,
Is your environment similar to this in http://obiee-bip.blogspot.com/2010/10/obiee-integration-with-oracle-access.html or something different like diid you have create groups in OAM .?
Also assuming your repository groups and presentation catalog groups are already setup. In the different authorization init block you have created enable the ‘Required for Authentication’ check box.
NOTE: According to Oracle Access Manager (OAM) and Oracle Business Intelligence (OBI) Integration [ID 1217103.1]
Creation of group should be done by loging as Administrator user to rpd and webcat. This should be done on different machine that does not have OAM integration. With OAM integration only OAM user can log into presentation services and they don’t have Administrator user privileges.
Hope this helps. Pls mark if it does.
Thanks,
SVS

OBIA 7.9.6.3 security integration with EBS R12.1.2

Hi Experts,
We are implementing OBI Apps 7.9.6.3 with EBS R12.1.2 as source.We need to integrate Active Directory with OBIEE and implement security of BI Apps with EBS R12.1.2. Need help on this.
How to map EBS Responsibilities into Application Role and Groups? Whether we need to create one Application Role and Group for each responsibility ? Then provide permissions in rpd for each of them? The user should have similar permission in BI as they have in EBS - like people can see only US Finance data in EBS should see only US Finance data in BI also.
Regards,
mvsst

You can go through obia security guide which explains step by step procedure with screenshot on how to implement ebs authentication and role based access.
here is the link.
http://docs.oracle.com/cd/E21043_01/bi.1111/e16364/ebs_actions.htm
Regards,
RAM
Edited by: RAM CH on May 20, 2012 1:34 PM

APEX integration with EBS 11i10: view concurrent request output

Hi All:
ENV: APEX 4.0
EBS: 11i10
DB: 10r2
APEX is installed in the same database as EBS 11i10
1. I have developed a APEX application that is can be launched from EBS as a form function. Also, the APEX will not ask any credential when user launch it from EBS, since user is already authenticated. Also, APEX will also display FND username, responsibility for user who has login - <<This is already implemented>>
2. by Default, APEX will display a page, where user can browser and import a csv file into a predefined custom table <<This is already implemented>>
3. After csv file is imported into cusotm table, user will click "Submit" button to process the data. APEX will submit a concurrent request (eventually, the concurrent program will call Oracle API to process data). A concurrent request is will display on the apex page. << This is WIP and I don't forsee any issue to implement this, since many have done this before>>
4. User will write down the request id from step 3 and go to another apex page. In this page, user will enter request id and click "View Output", which should retrieve the concurrent output for that request id and display the output in a new browser. I don't want user go back to EBS to view the concurrent output. << This is my question for this thread>>
My question for step 4: is there a seeded EBS API (FND_???) that I can call by passing a request id and API should display the concurrent request output in a browser automatically? Assuming, I will use fnd_global.apps_initialize() API in this page to set EBS env properly.
My question may not be a direct APEX question; however, I hope someone can offer some help to me. I have done numerous research on this and still haven't find this API.
Thanks!
Kevin

Hi Kevin,
I am having an issue implementing the Call from an EBS menu entry to the APEX Page.
I created the menu entry as a SSWA Function that use the apex_launch procedure to call the APEX page but when the user clicks on the option menu, the EBS login page appears.
Can you share with me how can I fix this?
Thanks
AEstrada.

BI Publisher Integration with EBS

I Integrate BI Publisher with EBS security model, and almost everthing works fine.
I have a EBS user with 2 responsibilities, and 2 reports in BI Publisher.
I assign to my reports a diferent responsibility (The same for my user).
When sign in BI Publisher I select a responsibility.
When I open caltalog I see both reports, and I can execute both.
If I change my responsibility in "My Account" I can still see and execute both reports.
I can't see any diference in data results, between responsibilities changes
How can I fix this?
Regards,
Rene

Great. So you can logon to EBS then click a menu function in EBS to go straight to the analytics "Dashboards" or "Answers" (without another logon). You probably noticed that the link "More Products" - "BI Publisher" on Dashboards is broken. This is not supported following implementation of EBS Single Sign On (ICX_SESSION_COOKIE etc.). See the very latest release notes plus various bugs on mos.
But yes you can as a workaround set up a normal HTML link in EBS (using javascript:void(window.open('http://host:port/xmlpserver/','_blank') to go to the Publisher logon page with security model EBS Security (uploaded databse configuration file DBC file from EBS). [BTW DBC security works on OC4J but currently bug throws error if deployed with latest WebLogic Server - I assume you are not using WLS?].
Unfortunately the user will have to enter their EBS user name and password to get into publisher. You now have the problem that when the user runs a report with a data source using answers or logical sql on the jdbc connection to the biserver this will create a RPD session then the init block will fire to authenticate using the connection pool with the pre connect call to validate an icx session cookie that does not exist. I fixed this by creating a default value for session variable ICX_SESSION_COOKIE then called a custom xx version of app_session to handle the case for a user coming in from publisher who is already authenticated so that the FND_GLOBAL call will work required for the security init blocks (LEDGER etc.).

Autodiscover not working correctly when Office 365 integrated with Server Essentials 2012 R2

Hello!
This last weekend I setup our server as new and to ease the creation of users, integrated with our Office 365 (which to this point has worked fine) and imported the users. This had a somewhat unexpected side effect in that the import used the email address
as for the user forename and then synced that change back to Office 365 and so needed to enter this information back in on the dashboard which synced back to Office 365. This may or may not have any relevance to our issue below.
I should also point out that we have our own domain name so within the original Office 365 setup we had just one .onmicrosoft.com user with all the rest setup with our own domain name.
At the weekend when it came to the client install, Outlook (2010 or 2013) would fail on the autodiscover with it asking again for credentials but critically displaying a server name of .contoso.com rather than the office365srvr.contoso.com . As I mention,
Office 365 had been operating fine for some time and DNS records where checked and have been set for sometime. I spoke to Office 365 support and after a while come up with a temporary solution (so that I could complete the client installs) of assigning each
user a onmicrosoft address, using that in the new account wizard to pick up the server correctly and then signing in the the Office 365 .contoso.com credentials.
This worked OK to get us past the weekend (although I am having to reset up profiles on quite number of users where they get disconnected but with no credentials box appearing) but isn't a solution. The clients do not see public folders or their archives
and of course we don't want to keep having to reset the profiles.
I'm think that there must be something in the internal network that needs reconfiguring but I don't know what. I have tried pointing the client to an external DNS server just in case the internal DNS server was throwing the autodiscover out but this has
made no difference.

Ah - solved my own problem.
Despite the domain DNS record looking OK and the Office 365 Portal domain checker not highlighting any issue, it looks as though the autodiscover is picking up an imap account provided by the web host.
I've added an alias on the local DNS server to point to the Office 365 autodiscover server and this has solved the problem.

OBIEE 11g integration with sharepoint or any with any other webserver possibilities

HI All,
Can we integrate OBIEE 11g Analysis and dashboards to SharePoint server ? If yes could you help us guiding in right way of implementing this request. Any kind of help on this is highly appreciated.
Can we use existing Weblogic web server to build some internal web applications. (Work flow tools)
Maker checker application:
We have Ops users which they send the daily reports to Traders for approval. Based on the approvals, end of day data will be reload into DB for Month end reporting. Reports are generating from OBIEE 11g.
Thanks,
Pavan

Hi,,
Thanks for your update,
Kindly provide any other document for obiee 11g integration part with Windows active directory
Thanks
Edited by: user11018780 on Feb 9, 2011 7:22 AM

OIM integration with EBS

Integrating OIM 9102 with EBS 12.0.6 and using User Management with HR Foundation Connector.
while provisioning provided some dummy employee number for employee number and its giving the error and
mentioned some default values for Business group id and person type id in Lookup.Lookup.EBS.UMHRMS.Configuration like 212 and 13 its throwing error
DEBUG,20 May 2010 18:11:30,315,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagementHelper : setProcParamsWithFormData:: FINISHED
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagementHelper : createEBSEmployee : Callable Statement return value : 1
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagementHelper : createEBSEmployee : Person ID : 0
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagementHelper : createEBSEmployee:: FINISHED
INFO,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagement : createEmployee : Person ID returned after creating a person is invalid. Person ID = 0
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagement : createEmployee : Create employee result: ERROR
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagement : createEmployee:: FINISHED
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagement : createUserHRF : Result of createEmployee : ERROR
DEBUG,20 May 2010 18:11:30,430,[OIMCP.EBSUM],oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagement : createUserHRF : Status = ERROR

Hi!
How did you solve the error? We're facing the same one.
Have no idea what are we doing wrong

User authentication when OBIEE is integrated with EBS

Similar Messages

Maybe you are looking for