is it possible to have simultaneous SSO for .NET and Java?

[system]

Hello, I have set up SSO for .NET and Java applications separately ie. for two distinct BOXI installations. Now I would like to set SSO for .NET and Java on the same server (ie. Tomcat and IIS are running on the same machine). Unfortunately, it seems I cannot do so.

Is this generally possible to have such SSO configuration for .NET and Java version of Infoview when IIS and Tomcat services are running on the same machine? If so, how can one archieve this? What are necessary modifications of procedures described in Deployment Guide or tricks needed to be done to have such configuration working? If it is not possible what should be changed in original one-machine .NET/Java configuration?

I would greatly appreciate your help.
thank you,
geos

---

geos (BOB member since 2006-09-04)

[system]

Unforunately from what I have read you can not. The article I am reading is

“BusinessObjects Enterprise XI Release 2 Service pack 2: Configuring End to End SSO with Active Directory for Java Application servers using Vintela”

The steps in this documentation will add a service principal name (SPN), which will clash with the IIS SPN. This will cause IIS to no longer be able to decrypt Kerberos tickets and IIS Windows Integrated Authentication will fail

---

mcliffordgoo (BOB member since 2003-02-13)

[system]

@mcliffordgoo

Unforunately from what I have read you can not. The article I am reading is

“BusinessObjects Enterprise XI Release 2 Service pack 2: Configuring End to End SSO with Active Directory for Java Application servers using Vintela”

The steps in this documentation will add a service principal name (SPN), which will clash with the IIS SPN. This will cause IIS to no longer be able to decrypt Kerberos tickets and IIS Windows Integrated Authentication will fail

hello, thank you for response and citation. I was hoping it is possible because one user reported it here (J0sh):

120×120 10.4 KB

I am not quite sure what the process is to use SSO with BO XI . We are using Tomcat , Windows 2003 server and can’t figure out how to get it work. We tried to modify authetication in the CMC but nothing worked. We would appreciate some help on this ? Cheers fablaga (BOB member since 2007-11-04)

do you know what sort of conflict exists between IIS and Tomcat when doing SSO vintela way? I’m trying to understand the background to think about possible solution…

well, if this is not possible, what do you guys say to client who has both .NET and Java version installed, and wants to do SSO? do you ask him to choose the version? I’m serious about it it’s a bit strange to me that such big BI suite reduces to one workable variant when doing SSO…

I would greatly appreciate your answer,
thank you,
geos

---

geos (BOB member since 2006-09-04)

[system]

XI 3.0 does not support IIS only Tomcat. So the only option that you have is to use Vintela for SSO. I am in the tinkering phase now trying to get it to work on our current R2 SP2 environment prior to going to 3.0.

I have heard that 3.1 will support IIS but it still sits on top of a java based server and just passes the token through. In my opinion I would choose the Java based web server and get SSO to work. There is no reason to use the .Net version if you can ge the Java working. You actually loose some functionality with .Net and the .Net SDK is not as good nor near as stable as the Java based SDK.

---

mcliffordgoo (BOB member since 2003-02-13)