Hello,
I am trying to set-up SSO for BO Enterprise for a Web Intelligence report connecting to an SAP ERP system. So far we have it working to some extent but have hit a problem when multiple users use the WebI reports.
I have configured the Security Token Service between the BI 4.1 system and the SAP ERP system and this works fine in isolation. I am able to use the BI Launchpad to run the WebI report and can see that the function module in the SAP ERP system is running as my user. The WebI report uses a .unx type universe and the associated connection is configured to the SAP JCO driver and is configured for single sign-on (CallerImpersonation). I also have the correct aliases in the user accounts to link the user's AD credentials to their SAP accounts.
Here is an example where it works correctly:
1. "UserA" logs into the BI Launchpad and runs the WebI report
2. "UserA" has an alias in the SAP ERP system
3. The function module in the SAP ERP system is run as "UserA"
The problem seems to happen after this when another user logs into the BI Launchpad
1. "UserB" logs into the BI Launchpad and runs the WebI report
2 "UserB" has a different alias ("UserB") in the SAp ERP system
3. The function module in the SAp ERP system runs as "UserA" again rather than "UserB"
My understanding is that each user should get a ticket from the Security Token Service for their SAP alaias, this does not appear to be working. It seems to randomly re-use tokens from other users in order to run the function module in the SAP ERP system. Has anyone else experienced similar issues when trying to user the Security Token Service? Many thanks in advance, Colin Hutsby