How to enable AD authentication on the Web Platform

Context

You want 360Suite Web Platform to use AD authentication the same way Business Objects does.

Procedure

As part of the AD authentication configuration on the Business Objects server, two files will have been created and saved on “C:\Windows\” directory (default).

1. bscLogin.conf
   
2. krb5.ini
   

1. Copy these two files from the Business Objects server and paste them on the 360Suite Web Platform server the same directory, in the same directory, i.e. C:\Windows\.
   
2. Open the 360Suite Web Platform Tomcat options, navigate to the Java tab and add the following lines to the Tomcat Java Options:
   

-Djava.security.auth.login.config=C:\Windows\bscLogin.conf
-Djava.security.krb5.conf=C:\Windows\krb5.ini

3. Navigate to the Log On tab and enter the AD Service Account Tomcat will use:

4. Click OK.

5. Restart the 360Suite Web Platform Tomcat for changes to take effect.

See also

1. SAP BusinessObjects Administrator Guide - Authentication section.
   
2. SCN blog for AD + SSO configuration: https://blogs.sap.com/2016/09/02/sso-configuration-with-active-directory-sap-business-objects-42-aes-encryption/
   
3. For SSO setup and configuration (including trusted SSO) - see Appendix C in the 360Suite installation guide.

• Related Articles

• 360Suite database configuration is not set when restarting Tomcat server

  Symptoms On application startup, a warning popup appears In the Administration console, the database configuration is empty even though is was setup previously Environment 360Suite Web Platform Linux server (all) Additional symptoms : tomcat logs In ...

• Does Apache Tomcat belongs to Product Support scope?

  Context Does Apache Tomcat belong to Product Support scope? Answer Apache Tomcat, a free open-source third-party Web application server, is bundled with 360Suite (a Wiiisdom product) for convenience of use, but is not considered part of the ...

• What are the proper steps to set up the Tomcat service account for Web Platform?

  Symptom How to configure 360Suite Web Platform to use a Windows domain service account to run the 360Suite Windows Service, if it is not an Administrator on the server, i.e. the Tomcat user? Environment 360Suite Web Platform Cause The issue is ...

• SAML Logon is showing the error "Problem Validating the Authentication Request"

  Symptom When logging to the application with the SAML Logon, the page loads and ends on this view : Cause The authentication request sent by the Identity Provider is not signed. It is not mandatory to have a signed response, but by default we enforce ...

• java.nio.file.DirectoryNotEmptyException: wartemp/META-INF

  Symptom When running the install.bash script, I get the following error: java.nio.file.DirectoryNotEmptyException: wartemp/META-INF Environment 360 Web Platform. *nix setup. Reproducing the issue Run the 360 Web Platform setup for *nix environments. ...