Create custom login page for BI Platform to integrate with 2FA API

[former_member410123]

Hi folks,

I am looking for a solution that will provide two-factor authentication(2FA) to the BI platform. SAPs SLC/SLS is not a viable option due to the requirement of installing a thick client for end users. SSO integration via a SAML IDP that supports 2FA is my preferred option but I have hit some roadblocks which will cause delay - so I am investigating other options in the interim.

Is it possible to completely customize/replace the login script for the BI Platform (SAP BusinessObjects BI Platform 4.2 SP5)? If so this would provide me an option to integrate with my identity providers 2FA APIs.

If anyone has any information or experience in this area your help would be greatly appreciated.

Thanks in advance.

Brad

[BasicTek]

Normally any 2 factor authentication would occur prior to accessing BI. The BI logon can perform 1 factor, but we have no integration that would perform multiple and since almost every company already has 2 factor auth outside BI there's not really much call for us to do so.

For instance you access your companies VPN using AD, and RSA (2 factor) you can integrate the AD with BI to login seamlessly, but we won't integrate with the RSA, that portion of the authentication already occurred to allow you access to the VPN and BI.

I'm curious why it's desirable to have 2 factor auth supported at the application level instead of the network level. It seems like it would be a lot of work and would certainly limit what choices of 2 factor available per application.

-Tim

[former_member585148]

Hi Tim,

My organization is implementing 2FA at all levels (both on the network and on the application) and as such i am very much interested in finding a solution to this and our prefered RSA is Microsoft i.e. Microsoft Authenticator.

We are currently running SAP BI4.1 SP5 on Tomcat and on Windows OS.

Your feedback will be very much appreciated.

- Seun

[BasicTek]

Microsoft can be integrated with BI, but the RSA would be integrated outside BI. Normally you would authenticate to a VPN with Microsoft and RSA, then open the BI app which would log you in with your microsoft credentials

-Tim