Windows AD and Business Objects on different domains

[former_member418791]

Hi Experts,

We installed business objects 4.1 on new domain and i am working on configuring windows AD authentication and SSO.

Now our BO servers are running on domain 1 and active directory is on domain 2.I am aware of regular windows AD and sso configuration.

https://blogs.sap.com/2016/09/02/sso-configuration-with-active-directory-sap-business-objects-42-aes...

Is there any extra steps to follow if BO servers and AD is on different domain?

Thanks,

Krishna

[denis_konovalov]

Have you tried searching SAP knowledge base ?
I'm fairly certain this is covered in KBA's

[BasicTek · Accepted solution]

BO does not need to be installed on the same domain.

If you mean BO is in a different forest you must follow the multi forest rules https://apps.support.sap.com/sap/support/knowledge/preview/en/1323391

If the domain is in the same forest then typically when mapping groups in the CMC you would make the users domain the default not the BO domain same in the krb5.ini. The BO domain is irrelevant in this case

Regards,

Tim

[former_member418791 · Accepted solution]

Thank you.