Oracle® Business Intelligence Enterprise Edition Deployment Guide > Enabling Oracle Single Sign-On for Oracle Business Intelligence >

Configuring Oracle BI for SSO


Apply this procedure to the obfuscated osso configuration file (biosso.conf) that was created in the topic Registering Oracle BI as a Partner Application to the Oracle Single Sign-On Server.

To configure Oracle BI for SSO

  1. Copy the file biosso.conf to the directory Oracle_HOME/Apache/Apache/conf/osso on the machines where the BI Presentation Services Plug-in Java Servlet is running.
  2. Open the mod_osso.conf file for editing.

    This file is located in Oracle_HOME/Apache/Apache/conf/.

  3. Add the following directive:

    OssoConfigFile Oracle_HOME/Apache/Apache/conf/osso/biosso.conf

  4. Statically protect the Oracle BI URL (identified by the keyword "analytics") by adding the following lines to mod_osso.conf:

    <IfModule mod_osso.c>
    ..<Location /analytics>
    ....AuthType Basic
    ....require valid-user
    ..</Location>
    </IfModule>

  5. Modify the above section as follows:

    <Location /analytics>
    ....Header unset Pragma
    ....OssoSendCacheHeaders off
    ....AuthType Basic
    ....require valid-user   
    </Location>

    After modifications described above, the mod_osso.conf file should be similar to the following example:

    OssoIpCheck off
    OssoIdleTimeout off
    OssoConfigFile Oracle_HOME/Apache/Apache/conf/osso/biosso.conf
    .......................
    <IfModule mod_osso.c>
    ..<Location /analytics>
    ....Header unset Pragma
    ....OssoSendCacheHeaders off
    ....AuthType Basic
    ....require valid-user
    ..</Location>
    </IfModule>

  6. Modify the file httpd.conf (in Oracle_HOME/Apache/Apache/conf/) by uncommenting the following line:

    include "Oracle_HOME/Apache/Apache/conf/mod_osso.conf"

  7. Restart the Oracle HTTP server using the following command:

    ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server

If Oracle BI has been configured for communication over SSL, then perform these additional steps:

  1. From the machine that hosts Oracle SSO server, copy the sso_apache.conf file located in Oracle_HOME/sso/config to the directory Oracle_HOME/Apache/Apache/conf on the machines that host the BI Presentation Services Plug-in (Java Servlet).
  2. On the BI Presentation Services Plug-in (Java Servlet) host machines, modify the file httpd.conf (in Oracle_HOME/Apache/Apache/conf/) to add the following directive:

    include "Oracle_HOME /Apache/Apache/conf/sso_apache.conf"

  3. Modify the sso_apache.conf file to enable the SSL section and comment out the rewrite section (only the section shown in the example is enabled):

    <IfDefine SSL>
    ...Oc4jExtractSSL on
    ...<Location /sso>
    .......SSLOptions +ExportCertData +StdEnvVars

    ...</Location>
    </IfDefine>

Oracle® Business Intelligence Enterprise Edition Deployment Guide Copyright © 2006, Oracle. All rights reserved.