Prerequisites

The following prerequisites must be satisfied before you attempt to configure LDAP authentication as described in this section:

• Oracle Analytics Server must be installed and configured.

• A suitable database schema containing at least one table with the required groups in it, and a mapping table which maps those groups to the names of users authenticated by LDAP must be running and accessible from the Oracle WebLogic Server on which Oracle Analytics Server is running.

• The configuration must include a supported LDAP server to use as the identity store that contains users.

• If you need Oracle Analytics Server to deliver content to members of an application role the following restrictions apply:

  • You can only pair a single LDAP authenticator with a single BISQLGroupProvider.

    When you configure multiple LDAP authenticators and want to retrieve group membership from the BISQLGroupProvider, content cannot be delivered to all members of an application role. In this configuration Oracle Analytics Delivers cannot resolve application role membership based on users and group membership.

  • You cannot define the same group in more than one identity store.

    You cannot have a group with the same name in both LDAP and database groups table. If you do, the security code invoked by Oracle Analytics Delivers cannot resolve application role membership.