how to setup to two domains in SAP BO 4.1 or 4.2

[Former Member]

Hi Everyone

Does anybody know if their a good guide on how to setup SAP BO 4.1 or 4.2 across two different domains. I have tried many different forums and never really found a suitable answer. Some people tell me it justs works, other tell me to add two realms, others tell me to do a registry hack. But none of these seem to work for me.

Do i need two biservice account one for each domain and for two sets of SPNs, for example?

Anyhelp, I am stuck as to what to do next.

[Former Member]

Hi Everyone,

I have had a small amount of success i have managed to get KINIT to reconqinuze both domains, I managed to login succefully. However when I try to login to the BILaunchPad it says,

Account information not recognized: The Active Directory Authentication plugin could not authenticate at this time. Please try again. If the problem persists, please contact your technical support department. (FWM 00005)

But I have put the secuond domain in as an alias, i am thinking it's something to do with me needing to login with @DOMAIN but in the CMC everthing is @domain.local, and I can't change this for the secound domain.

The Default domain is working fine btw.

[former_member205064]

login in BILaunhppad in the format user@DOMAIN.COM

Check the trust status with your AD team it has to be forest.

Have you configured the Krb5.ini for other forest as well?

[former_member205064]

you don't need 2 service account one service account will do.

Configuration BI with 2 domain the basic requirement is

1. 2 way forest trust
2. configuring the krb5 for 2 domain.

You just have to follow 2 Configuration doc:-

1323391 - What are the requirements to perform SSO or manual authentication from multiple AD forests in XI 3.1 or later

1631734 - Configuring Active Directory Manual Authentication and SSO for BI4

there is a PDF attached in the end of the second note follow that and the only extra steps which is required apart form the PDF is mentioned

in the first SAP note

For Krb5 creation follow 1245178