BusinessObjects Enterprise Administrator's Guide
Configuring LDAP single sign-on with SiteMinder
SiteMinder is a third-party user access and authentication tool that you can use with the LDAP security plug-in to create single sign-on to BusinessObjects Enterprise. In order to use SiteMinder, you need to configure the single sign-on authentication for the LDAP plug-in.
For more information about SiteMinder and how to install it, refer to the SiteMinder documentation.
To configure LDAP for single sign-on with SiteMinder
- If necessary, go to the Authentication management area of the CMC again. Click the LDAP tab, and then click Start LDAP Configuration Wizard. Click Next until the screen of the wizard asks for the LDAP single sign-on authentication. Otherwise, skip to step 2.
- Select the type of single sign-on authentication (Basic (no SSO) or SiteMinder).
- Click Next.
- If you selected SiteMinder, configure the SiteMinder hosts:
- In the Policy Server Host box, type the name of each Policy Server, and then click Add.
- For each Policy Server Host, specify the Accounting, Authentication and Authorization port numbers.
- Enter the name of the Web Agent and the Shared Secret. Enter the shared secret again.
- Click Next.
- Proceed with configuring the LDAP options.
Troubleshooting SiteMinder single sign-on
If you are using SiteMinder with IIS, you may receive an error message in the Central Management Console regarding the failure of single sign-on. If you encounter this message, you may need to manually create two registry keys for SiteMinder:
- Create the following key, set its type to
REG_DWORD, and set its value to 1:
HKEY_LOCAL_MACHINE\SOFTWARE\Business Objects\Suite 11.5\
Enterprise\Admin Plugins\CrystalEnterprise.CMSAdmin\
EnableSiteMinderSingleSignOn
- Create a second key, set its type to REG_SZ, and set its value to the authentication type that you want to use for Siteminder single sign-on (
secLDAP or secWinAD):
HKEY_LOCAL_MACHINE\SOFTWARE\Business Objects\Suite 11.5\
Enterprise\Admin Plugins\CrystalEnterprise.CMSAdmin\
SiteMinderAuthentication