Is it possible to implement SSO on SAP BO 4.2 SP5 (Quality server and Production server)

[former_member476351]

Hi engineers.

We have the following environment: SAP BO 4.2 SP5 (Quality server and Production server) and a Microsoft Active Directory.

And now the Question:

Is it possible to link quality and production BO to a ActiveDirectory to implement SSO?

[former_member456023 · Accepted solution]

you can configure SSO on Quality BO and Production BO pointing to same Active Directory.

ex -

Server - Quality BO
Active Directory - AD1

Server - Production BO
Active Directory - AD1

configure SSO for each server so use different service account for different BO server.

[former_member476351 · Accepted solution]

Thank you for the information!!

Should I avoid to use same service account for different BO server ??

[former_member456023 · Accepted solution]

In one of the configuration step, we generate SPN's w.r.t BO server and service account.

To avoid duplication better not use same service account for different BO server.

[former_member476351 · Accepted solution]

Thank you for good advices.

I'll config different service account for each BO server.

[BasicTek · Accepted solution]

If you use the same service account for multiple environments just be aware if you need to modify that account you risk affecting all the environments, while you are less likely to generate duplicate SPN's a better option is to use setspn -s (available in windows 2008+) which will check the spn's when creating them or setspn -x to check for duplicates. As a support engineer that has worked literally thousands of issues it's better to use 1 account per environment. KBA 2629070 also follows that approach

[BasicTek]

I have rewritten the AD SSO whitepaper in KBA 2629070 to be more compliant with current security, encryption, and more importantly new features that have been added in the last few years. The link is also available at the top of KBA 1631734 as well.

-Tim

[former_member476351]

Thank you for the information, I'll check the new KBA 2629070!!

[DellSC]

Instructions for configuring AD SSO can be found attached to KBA 1631734.

-Dell

[former_member476351]

Thank you for your information.

I'll check the KB

[former_member185603]

You need to configure SSO on individual servers.

[former_member476351]

Thank you for the information!