Skip to end of metadata
Go to start of metadata

Product versions: XI3.1, BI 4.0, BI 4.1

 
 
 
 

Note: Minor adjustments for BI 4.0 and 4.1 are located in the Comments section of this article.

1. Prerequisites

  • SAP Authentication is already set on Entitlement Systems tab and SAP Roles/users are imported.
  • Windows AD Authentication is already set and AD groups/users are imported.

2. Manually mapping AD users to SAP users

(In this example user account "xiad" has been created in Windows AD and SAP System and we want to map them)

  1. Log into CMC as administrator.
  2. Go to "Users and Groups"
  3. Go to AD user group (in this case "bobjtest\xigroup")
  4. Go to properties (right click on user) for user "xiad" from this group.
  5. Click "Assign Alias..." button to assign alias from imported SAP user group
  6. Select user from SAP user that you want to map with AD user and click OK.

    You will be prompted with message

    (Home folder for SAP "xiad" users will be removed.)
  7. Click OK button
  8. Click "Save and Close" button.

    Users are now mapped
    (In this example SAP "xiad" user from "R36~800" and "R37~800" SAP groups are mapped with AD "xiad" user from "bobjtest\xigroup" AD user group)

3. Mapping SAP users and AD users by using registry key - recommended method

This method requires planning of SAP and AD users. User IDs have to be identical in SAP and AD.
The SAP alias SID~CLNT/USER01 and AD alias DOMAIN\USER01 will be automatically mapped to the matching BO USER01 when SAP user ID and AD user ID are identical.

  1. Enable BO registry setting to import SAP users in simple user name format
    (Run regedit tool and set registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Business Objects\Suite 12.0\SAP\Authentication\SimpleUsernameFormat" to Yes. The impact of this registry key is that SAP user SID~CLNT/USER01 will be imported into BO as USER01)
    Note: For BI 4.x the key is located at: HKLM\SOFTWARE\SAP BusinessObjects\Suite XI 4.0\Enterprise\Auth Plugins\secSAPR3\SimpleUsernameFormat
  2. Restart BOE server
  3. Log into InfoView with SAP user ID and SAP authentication (check user list in CMC to see imported SAP user ID)
  4. Log into InfoView with Windows AD user ID and Windows AD authentication
  5. Check user properties for SAP user ID in CMC. Windows AD user ID is automatically mapped with SAP user ID.

How to setup XI3.1 WebIntelligence SSO with SAP BW
How to prepare BOE XI3.1 environment for SNC and generate PSE
How to configure SNC in XI3.1 CMC

2 Comments

  1. This still applies to 4.0.  Only the registry key location changes:

    HKLM\SOFTWARE\SAP BusinessObjects\Suite XI 4.0\Enterprise\Auth Plugins\secSAPR3\SimpleUsernameFormat

  2. Former Member

    While using the Registry method, will it remove the associated home folders of the SAP users from the system ?

    As it does in Step 2.6 in the above article?

    --- Vaibhav Patil