absolutely not, AD and LDAP passwords do not usually pass into BI. for instance when AD SSO is enabled the negotiation occurs on the client machine, the TGS request is sent with the service account, the user logged in, and Ad session created. With manual logon or LDAP the request is sent from the web/app to LDAP/AD and BI is not actually involved in the authentication just the session creation after the response from the external directory.
So unlike BI enterprise users where BI authenticates the job of performing this is done by the external direcotry servers themselves.
but what the confusion is then ? for confusion there has to be something that says one things and something that says the other.
BOE administrators cannot see any passwords, enterprise/AD/LDAP/SAP. It is industry default standard that no one can see users passwords. Breaking that goes against every security principle ever.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.