BusinessObjects Enterprise Administrator's Guide

Configuring Kerberos single sign-on

This section tells you how to set up end-to-end single sign-on to your BusinessObjects Enterprise system and its back-end databases by using Kerberos and Windows AD authentication.

For general information about the levels of single sign-on that are supported in BusinessObjects Enterprise, see "About single sign-on" on page 217.

BusinessObjects Enterprise currently supports single sign-on to the database with Windows AD using Kerberos. See the Platforms.txt file included with your product distribution for a complete list of version requirements.

Configuration process overview

Configuring end-to-end single sign-on using Kerberos includes the following main steps:

1. Setting up a service account

Note:    The order in which you complete these steps is not important. However, before you can proceed you must have set up the service account.

2. Configuring the servers
3. Configuring the Windows AD plug-in for Kerberos authentication
4. Configuring Kerberos for Windows Active Directory authentication
5. Configuring the IIS and browsers
6. Configuring IIS for end-to-end single sign-on
7. Configuring BusinessObjects Enterprise web applications
8. Configuring the databases for single sign-on