SSO Multiple SAP BW Sources via BICS

[Former Member]

Hi,

I have a BI 4.1 system setup which connecs to SAP BW via BICs. I will require the user to be able to connect to different source systems for example, in the BI 4.1 UAT system if they will need to be able to connect to SAP BW Dev or Prod systems as and when required.

I am thinking of setting up the BI 4.1 system so it has authentication setup with SAP BW Dev or Prod. The BICs connection will have SSO. In turn if the user logs in using the SAP BW Dev user e.d. DEV~100\USERA then they will connect to the Dev system. If they use the user PRD~100\USERA then they will connect to the Production system.

Does anyone have any concerns with this? At the moment we use XI 3.1 universe to connect to SAP BW and we can use manage access restrictions at the universe level to switch access if required - so we need a way to do this using BICs.

Thanks,

[former_member142702 · Accepted solution]

This setup will not work. A Webi quey based on Bics can connect to a single sap bw system. You have to consider installing different bo systems for every sap bw system you are using and setup the connection object to point to the appropriate sap bw system.

Best regards

Statos

[Former Member · Accepted solution]

Hello Statos,

I know this thread is closed but I have similar problem and looking for a  clear answer which seems hard to find.

Can I connect two separate clients of the same SAP system to BI and use SSO STS for it.

I have connected one client 100, imported the required certs and maintained ACL and SSO for OLAP connection with BICS is working.

Now I did the same for client 110 but the SSO with OLAP connection is not working and two of my systems have same problem.

So I am beginning to think if this is possible or not. Any inputs will be highly appreciated.

Regards

Amit

[Former Member]

Hi,

Thanks for all your replies.

Essentially there are workarounds but not possible easily.

The reason why i wanted to do it becuase in the BO UAT environment the users sometimes a set of users want to use Dev Data and others Prod Data. What i will have to do is explain that I can changed the connection details but will mean all users will have to test with the same set of data. This i could do is by just changing the connection details for the relevant BICs connection.

Cheers,

[former_member142702]

Another option is to buld a report that fecthes the same data from two different connections. Based on report logic you can then show the data from the correct source based on the user name.

The main drawback is that you have to wait until both queries run before you see any data and that existing reports may have to be redesigned.

Best regards,

Stratos

PS: In my opinion is the best practice here to have as many BO systems installed as your SAP BW systems (eg. DEV; Q, PROD)

[IngoH]

Hello Leo,

if you would like to have one Web Intelligence report with BEx queries from multiple BW systems the key items to take care are:

- you will need more than one OLAP connection - at least one per system

- you will need to configure the Single Sign On Token Service to be configured

- you will need to configure trust between the BW systems as well

- you will need to agree on the "leading" BW system - means the one that is used as BW system for the SAP Authentication

- all BW systems need to be confgured in the SAP authentication

- user mapping between the imported users

that should be it

Ingo

[Former Member]

Hi Ingo,

Thanks for your response. It looks like your answer is related to a single WebI report which uses data from multiple systems rather my question was if a single WebI report could be directed to use different connections based on the username.

Thanks,

[rama_shankar3]

Leo,

What I would suggest to keep it simple is to design  multiple webi reports one for each connection driven by role and folder level security where depending on the role that a user belongs to will have access to that specific webi report with specific connection information.

The other option is to customize the webi report using SDK scripting.

Hope this helps.

Rama Shankar

[IngoH]

Hi Leo,

that would only be possible using the SDK

ingo