Alias SAP auth to AD

Hello

We are placing users in AD Groups and then within BO CMC we are updating those groups so those users are being pulled into BO. These users also have backend SAP access in BWD. In SAP BWD our users have User IDs which are different from their NT IDs which are in AD. So when they log into BO with their SAP credentials for the first time it creates a BWD~xxxxxxx User ID for that user, we then alias that ID to the AD ID. My issue is if the user does not log in for a day, or a week or whatever time frame we never know when the BWD~ ID shows up unless we keep looking for it. Is there an automatic way or a different way to set this up?

We are on XI 3.1

Thank You


vvitale (BOB member since 2010-02-19)

I believe you can use the audit universe to determine the user accounts and when they have been created.

You can then determine which accounts need to be set up and given what permissions.


mcliffordgoo :us: (BOB member since 2003-02-13)

Thanks mcliffordgoo but I do not see an audit universe. That is not one of the default ones in our system. We have efashion and Island Resorts Marketing out of the box. I see nothing about audits. There is a Webi Universes folder and Report Conversion Tool Universes folder within Universes within CMC and none of those contain anything called audit?

Thank You


vvitale (BOB member since 2010-02-19)

When you enable Auditing within your CMC you will need to import the biar file for auditing. It is not installed automatically. Choose the biar that matches your CMS Repository database.

The directory path is on the server running you web server

\server\d$\Program Files (x86)\Business Objects\BusinessObjects Enterprise 12.0\Samples


mcliffordgoo :us: (BOB member since 2003-02-13)

You might consider changing the account naming behavior for SAP Authentication so that it doesn’t create the [env]~[client]/[account_name], but rather the simple name [account_name]. That way the SAP account will alias to the WinAD automatically as long as the base account names match. The SAP roles may have to be re-imported, so be careful if you have set many users up already…you don’t want to accidentally delete accounts (that have no other alias) tied to roles you delete and re-import. Check out the following post:


bgray :us: (BOB member since 2005-06-22)