Business Objects 4.1 SSO not working on Chrome

[Former Member]

I successfully configured SSO for Business Objects 4.1 Platform using http://scn.sap.com/docs/DOC-26314. SSO is working on internet explorer. It still prompts for user name and password in Chrome. Is there anything else to be done?

[wmarcy · Accepted solution]

Hi,

Google Chrome does not accept Kerberos ticket so the SSO configuration is not working on this web browser.

Prerequisite is Internet explorer or Mozilla.

Regards,

[Former Member · Accepted solution]

William,

It isnt working on mozilla also. Is there a workaround?

Thanks

Anil

[Former Member · Accepted solution]

Please follow note 1263764 for config of firefox SSO..

[Former Member · Accepted solution]

This worked. Is there any possibility that i could make it work for Google Chrome ??

[chris_florek · Accepted solution]

See Lee's response -  PART B.

[Former Member]

Here are the notes we have for configuring Firefox and Chrome config for SSO with Kerberos

A. To configure Mozilla Firefox (Version 15 and above only) for SSO:
1. Open Mozilla Firefox
2. In the URL field type in "about:config" and hit the enter key
3. Accept the warning
4. It will open the configuration console of Firefox
5. In the search bar type in "network.negotiate-auth.delegation-uris"
6. Double click and it will open one window
7. Type "http://hostname " here which should be the FQDN of the server you want to access via SSO.(you can do multiple entries separated by a comma)
Example: http://sapqbw.insummit.com,http://sapportal.insummit.com,http://sapdbw.insummit.com,http://sapcrmd.i...
8. Click OK
9. Now in the search bar type "network.negotiate-auth.trusted-uris"
10. Double click
11. Type "http://hostname " here which should be the FQDN of the server you want to access via SSO.(you can do multiple entries separated by a comma)
12. Click OK
13. Restart the Firefox
14. Open your website
15. SSO should be working now

B. To configure Google Chrome for SSO:
1. run regedit and navigate   to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome on a workstation that has Google Chrome installed, if it isn’t there you need to create the key
2. add the string value AuthNegotiateDelegateWhitelist
3. Enter the value either http://*insummit.com (to allow all hosts in your domain, or the FQDN and hostname of each URL separated by a semicolon
4. i.e. your webapps URLs are http://dev-bi.insummit.com and http://bi.insummit.com add the following http://*dev-bi.insummit.com; http://*bi.insummit.com
5. If you have multiple or many Chrome clients please consult your AD admin to see if he can deploy this setting via group policy to save on all the manual registry edits

Lee Lewis

[Former Member]

Lee,

This is still not working, I am getting the same error both in chrome and mozilla

[former_member205064]

Hi Anil,

Check SAP note 1887193 - I'm unable to perform SSO with BI using my Google Chrome browser

should be helpful.

-Raunak

[chris_florek]

Thanks LEE for the detailed descritpion. After applying steps provided by you, the SSO works very well on Firefox and Chrome. Thanks!

[Former Member]

Lee:

  Thanks for your answer. It's quite complete.

  I apologize for replying back into such old case; however I don't feel like opening another case for the same issue. The update question is:

1.- Do you know the matching registry key ( HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome ) to make Chrome work in Windows 10 instead of a Windows 7 PC?

We got an environment where Windows 7 and Windows 10 PC coexist and the SSO works in Windows 7 machines after your suggested changes; however can't do in a Windows 10 machine simply because the Key Three doesn't exist.

Any hints?

Regards

Reinaldo Nunez