We are planning an environment - BO XI3.1 SP3 on Windows Server. The System DB and Audit DB will be Oracle and the connection will be done using Oracle client and TNS Names. We would like to configure BO with the existing Windows AD groups. I have two questions regarding this.
1. Can we configure Windows AD for manual authentication (no SSO) when the System DB and Audit DB are in Oracle database? I have configured AD only when the repository dbs were in SQL Server not in Oracle, hence the question. Are there any known issues in this kind of setup or any pitfalls that I have to watch out for?
2. I have also requested a domain account (Service Account) for running BOBJ services on the server plus asked the administrators to give AD administrative privileges to this domain account so that it has ability to browse through all the AD groups. I am thinking of using this AD account in the AD Administrator field in the AD-Plugin page in CMC. Is this approach correct? Do we need to add SPN properties to this Service Account to configure just manual AD but no SSO?
Any insights, recommendations and suggestions most welcome.
Thanks in Advance.