Oracle® Business Intelligence Enterprise Edition Deployment Guide > Enabling Oracle Single Sign-On for Oracle Business Intelligence >
Configuring Oracle BI for SSO
Apply this procedure to the obfuscated osso configuration file (biosso.conf) that was created in the topic Registering Oracle BI as a Partner Application to the Oracle Single Sign-On Server. To configure Oracle BI for SSO
- Copy the file biosso.conf to the directory Oracle_HOME/Apache/Apache/conf/osso on the machines where the BI Presentation Services Plug-in Java Servlet is running.
- Open the mod_osso.conf file for editing.
This file is located in Oracle_HOME/Apache/Apache/conf/.
- Add the following directive:
OssoConfigFile Oracle_HOME/Apache/Apache/conf/osso/biosso.conf
- Statically protect the Oracle BI URL (identified by the keyword "analytics") by adding the following lines to mod_osso.conf:
<IfModule mod_osso.c> ..<Location /analytics> ....AuthType Basic ....require valid-user ..</Location> </IfModule>
- Modify the above section as follows:
<Location /analytics> ....Header unset Pragma ....OssoSendCacheHeaders off ....AuthType Basic ....require valid-user </Location>
After modifications described above, the mod_osso.conf file should be similar to the following example:
OssoIpCheck off OssoIdleTimeout off OssoConfigFile Oracle_HOME/Apache/Apache/conf/osso/biosso.conf ....................... <IfModule mod_osso.c> ..<Location /analytics> ....Header unset Pragma ....OssoSendCacheHeaders off ....AuthType Basic ....require valid-user ..</Location> </IfModule>
- Modify the file httpd.conf (in Oracle_HOME/Apache/Apache/conf/) by uncommenting the following line:
include "Oracle_HOME/Apache/Apache/conf/mod_osso.conf"
- Restart the Oracle HTTP server using the following command:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
If Oracle BI has been configured for communication over SSL, then perform these additional steps:
- From the machine that hosts Oracle SSO server, copy the sso_apache.conf file located in Oracle_HOME/sso/config to the directory Oracle_HOME/Apache/Apache/conf on the machines that host the BI Presentation Services Plug-in (Java Servlet).
- On the BI Presentation Services Plug-in (Java Servlet) host machines, modify the file httpd.conf (in Oracle_HOME/Apache/Apache/conf/) to add the following directive:
include "Oracle_HOME /Apache/Apache/conf/sso_apache.conf"
- Modify the sso_apache.conf file to enable the SSL section and comment out the rewrite section (only the section shown in the example is enabled):
<IfDefine SSL> ...Oc4jExtractSSL on ...<Location /sso> .......SSLOptions +ExportCertData +StdEnvVars
...</Location> </IfDefine>
|