Enabling Oracle Business Intelligence to Use SSO Authentication

After you configure Oracle Business Intelligence to use the SSO solution, you must enable SSO authentication for Oracle Business Intelligence.

After you enable SSO, the default Oracle Business Intelligence login page is not available.

Enabling and Disabling SSO Authentication Using WLST Commands

How you use WLST commands to enable or disable SSO authentication for Oracle Business Intelligence.

Assumptions:

  • You must have file system and WebLogic Administrator permissions.
  • This is an offline activity.
  • Validation is limited to URL format, no connectivity or WebLogic configuration is validated.
  • Changing the logoff-URL requires re-enablement (disable, then enable with new URL).
  • Logon URL is not required.

Pre-requisites:

See Using the WebLogic Scripting Tool (WLST) in System Administrator's Guide for Oracle Business Intelligence Enterprise Edition.

See Starting Oracle Business Intelligence Component Processes in System Administrator's Guide for Oracle Business Intelligence Enterprise Edition.

  1. Stop the BI system.

    For example on UNIX use:

    ./stop.sh

  2. Enter a SSO management command from the table using the WLST command line.
    Command Arguments Return Description

    enableBISingleSignOn

    DOMAIN_HOME<logoff-url>

    None

    Enable SSO and configure logoff URL.

    disableBISingleSignOn

    DOMAIN_HOME

    None

    Disable SSO.

    For example on UNIX:

    • Change directory to:

      <Install_Directory>/oracle_common/common/bin

    • Start WLST using the following command:

      ./wlst.sh

      Run the command help(‘BILifecycle’) to display help about enableSingleSignon and disableSingleSignon commands and their arguments.

    • Run the enableSingleSignon or disableSingleSignon command using the arguments in the table above (also described in the wlst help).

  3. The SSO configuration for Oracle Business Intelligence is updated. Restart the Oracle Business Intelligence component processes to consume the changes.

    For example on UNIX use:

    ./start.sh

Enabling SSO Authentication Using Fusion Middleware Control

How you enable SSO authentication for Oracle Business Intelligence using the Security tab in Fusion Middleware Control.

See Using Oracle Fusion Middleware Control, and Starting and Stopping the Oracle Business Intelligence Components in System Administrator's Guide for Oracle Business Intelligence Enterprise Edition.

  1. Log in to Fusion Middleware Control.
  2. Go to the Security page and display the Single Sign On tab.

    Click the Help for this page Help menu option to access the page-level help for its elements.

  3. Click Lock and Edit.
  4. Select Enable SSO.

    When selected, this checkbox enables SSO to be the method of authentication into Oracle Business Intelligence. The appropriate form of SSO is determined by the configuration settings made for the chosen SSO provider.

  5. If required, enter the logoff URL for the configured SSO provider.

    The logoff URL (specified by the SSO provider) must be outside the domain and port that the SSO provider protects, because the system does not log users out.

  6. Click Apply, then Activate Changes.
  7. Restart the Oracle Business Intelligence components using Fusion Middleware Control.