Skip to Content
avatar image
Former Member

Live office logon error : LO02040 with LO SSO authentication

Hi Guys,

Hope you can help me with this issue.

I have BI 4.1 SP5 deployment on Tomcat with SSO for BI Launchpad fully working.

I installed Live Office on a Windows 7 client.

NOTE: I have also setup SSO for Live Office by following SAP Note:

1646920 - How to configure Web Services Single Sign-On (dswsbobje) with Tomcat for SAP BusinessObjects Business Intelligence platform 4+

When I try to connect to BI server through Enterprize authentication it is working. Can connect , browse content , embed reports into Excel.

BUT, when I try to connect with Windows AD with "Enable Windows Active Directory Single Sing On" option, I get below error:

The user account through which I try to do SSO login is a member of appropriate AD Group and CAN SSO to BI Launchpad with no problems.

With Live Office SSO I get above errors.

Any clues as to the cause of this error ?

Thank you for your feedback.

Regards,

Davor Mitrasevic

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    Jun 03, 2015 at 12:11 PM

    Do manual AD logins work with LO?

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Josh,

      I've fixed the problem with LO Single Sign On.

      Cause of the error:

      In the web.xml both Kerberos Proxy Filter (set the same settings in your global.properties) AND  Kerberos Filter (filter mapping) lower in the document need to be commented in.

      I did not have Kerberos Filter (filter mapping) commented in , hence the real configuration under the node  of Kerberos Proxy Filter was not activated at all although it was correct !!!

      Once I commented in the node Kerberos Filter (filter mapping) it all worked fine.

      Thanks for your help guys.

  • Jun 03, 2015 at 12:28 PM

    check SAP note :-

    1204819-How to troubleshoot LiveOffice Single Sign-On with Tomcat by using traces

    1203218-How to configure Web Services Single Sign-On (dswsbobje) with Tomcat for clients such as Live Office, QaaWS and BI Widgets

    1197361-Prerequisites for configuring LiveOffice Single Sign-On

    Most importantly as mentioned by Josh Make Manual AD work first.

    Add comment
    10|10000 characters needed characters exceeded