4-8 Security Guide for Oracle Business Intelligence Enterprise Edition
6. In the Providers tab, perform the following steps to reorder Providers:
a. Click Reorder
b. In the Reorder Authentication Providers page, select a provider name, and
use the arrows beside the list to order the providers as follows:
– OID Authenticator SUFFICIENT
– OAM Identity Asserter REQUIRED
– Default Authenticator SUFFICIENT
c. Click OK to save your changes.
7. In the Change Center, click Activate Changes.
8.
Restart Oracle WebLogic Server. You can verify that Oracle Internet Directory is the new identity store default
authenticator by logging back into Oracle WebLogic Server and verifying the users and groups stored in the LDAP server appear in the console.
9.
Use Fusion Middleware Control to enable SSO authentication. For more information, see
Section 4.6, Using Fusion Middleware Control to Enable SSO Authentication
.
4.5 Configuring Custom SSO Environments
For information about configuring Oracle Business Intelligence to participate in custom SSO environments for example, Configuring authentication and SSO with
Active Directory and Windows Native Authentication, and Configuring Oracle Business Intelligence Enterprise Edition 11g to work with SiteMinder SSO, see article
ID 1284399.1 on My Oracle Support at:
https:support.oracle.com
4.6 Using Fusion Middleware Control to Enable SSO Authentication
After Oracle Business Intelligence has been configured to use the SSO solution configured for use by Oracle Fusion Middleware, you must enable SSO authentication
for Oracle Business Intelligence in Fusion Middleware Control from the Security tab.
To enable Oracle Business Intelligence to use SSO authentication: 1.
Go to the Business Intelligence Overview page. For information, see Logging In to Fusion Middleware Control in Oracle Fusion
Middleware System Administrators Guide for Oracle Business Intelligence Enterprise Edition.
2. Go to the Security page.
Click the Help button on the page to access the page-level help for its elements. 3.
Click Lock and Edit Configuration. 4.
Select Enable SSO.
When selected, this checkbox enables SSO to be the method of authentication into Oracle Business Intelligence. The appropriate form of SSO is determined by the
configuration settings made for the chosen SSO provider.
5.
Select the configured SSO provider from the list.
Enabling SSO Authentication 4-9
The SSO provider list becomes active when you select the Enable SSO checkbox. 6.
If required, enter logon and logoff URLs for the configured SSO provider. The logoff URL specified by the SSO provider must be outside the domain and
port that the SSO provider protects, because the system does not log users out.
7. Click Apply, then Activate Changes.
8.
Restart the Oracle Business Intelligence components using Fusion Middleware Control.
For more information, see Starting and Stopping the Oracle Business Intelligence Components in Oracle Fusion Middleware System Administrators Guide for Oracle
Business Intelligence Enterprise Edition.
4-10 Security Guide for Oracle Business Intelligence Enterprise Edition
5
SSL Configuration in Oracle Business Intelligence 5-1
5
SSL Configuration in Oracle Business Intelligence
This chapter describes how to configure Oracle BI components to communicate over the Secure Socket Layer SSL.
The SSL Everywhere feature of Oracle Business Intelligence enables secure communications between the components. You can configure SSL communication
between the Oracle Business Intelligence components and between Oracle WebLogic Server for secure HTTP communication across your deployment. This section does not
cover configuring secure communications to external services, such as databases and Web servers. For information about how to configure SSL for Oracle WebLogic Server,
see SSL Configuration in Oracle Fusion Middleware in Oracle Fusion Middleware Administrators Guide.
This chapter contains the following sections:
■
Section 5.1, Common SSL Configuration Tasks for Oracle Business Intelligence
