Passing Logon on BI-Platform

[Former Member]

Hello together,

we develop dashboards with live data for a webpage, so that the dashboard is reachable for all person (special user group & rights in Cmc).

Until now we use qaaws with hard coded user login in excel sheet, so ther is no logon prompt.

Now, we want to change the connections from webservice to BICS (direct sap bw access). The dashboard works fine, but it needs logon on BI-Platform.

Flashfile must be outside of launchpad. It is on webserver, cause it needs some further information from flatfiles in the same directory.

I dont find special settings for a dashboard-document in cmc.

Which is an "easy" method to pass this logon?

TIA

Stefan

[Former Member · Accepted solution]

Hi Stefan,

You can pass logon creadentials outside BI- Platform using Open-document url

Here are few ways to pass logon information:

1)   Single Sign On
If your BOE system is configured to utilize Single Sign On then the OpenDocument and URL Reporting web applications should take advantage of this as well and allow documents to be viewed without requiring a logon token in the URL.

2)   Logon Token Generation Code
If you want to integrate an OpenDocument URL into a custom application you can write code that will create a Logon Token so that the end users aren’t prompted to log into the Enterprise system. These links include sample code for generating a logon token at runtime in a custom application.

NET SDK:

SAP Knowledge Base Article 1324775 "How to use the Enterprise .NET SDK to create a logon token for opendocument.aspx" - For BOE XI 3.1.

Java SDK:

SAP Knowledge Base Article 1206939 "How to create a logon token for the OpenDocument method and URL reporting using the Java SDK".

You can also refer following link:

http://scn.sap.com/thread/3193951

Hope these information would be helpful.

Regards,

Namita

[Former Member]

Hello can you please help on explaining these two parts. I use BO4.0 and windows server.

- save file TrustedPrincipal.conf on Applikation Server

- creating file "global.properties" on os and configure:

sso.enabled=true

trusted.auth.user.param=user

trusted.auth.user.retrieval=QUERY_STRING

[Former Member]

Hello,

thanks for your answers. They are all helpful.

But we take this easy solution:

- in CMC/Authentification/Enterprise enabled "trusted authentification" for opendoc

- ...and  "download secret key"

- save file TrustedPrincipal.conf on Applikation Server

- creating file "global.properties" on os and configure:

sso.enabled=true

trusted.auth.user.param=user

trusted.auth.user.retrieval=QUERY_STRING

Now the opendoc works with user=internetuser without logon prompt.

Stefan

[Former Member]

Stefan there is a path where the TrustedPrincipal.conf file must be placed in the application server??? Could you please tell me what it is??

Regards

[charlesreed]

Elio,

The location depends on the OS where your Platform is installed.  Check the BI 4.0 Administrator guide under section 8.2.5.3 To configure Trusted Authentication for the web application.

Link to BI Documentation:  http://help.sap.com/bobip

Regards,
Charles

[vinay_mhaske]

Hi Stefan,

Here are my inputs:

• We need to publish dashboard to BW Portal if it is based of BICS (SAP Netweaver BW Connection)
• We cannot preview the dashboard based of BICS directly from Xcelsius. We can preview BICS based dashboard from BW Portal using SAP -> Launch menu inside Xcelsius
• Other than hard coding user credentials in QaaWS connection, the only possible way to pass credentials is to use open doc and pass token.
• For open document dashboard needs to be hosted on BO Server (BOE Repository)

Hope this helps! 

Thank you.

Regards,