BusinessObjects Enterprise Administrator's Guide

Configuring the IIS and browsers

In order to support Kerberos end-to-end single sign-on, you have to configure the BusinessObjects Enterprise clients. This includes:

• Configuring the BusinessObjects Enterprise clients on the IIS
• Configuring the Internet Explorer browser on a client machine

Configuring the BusinessObjects Enterprise clients on the IIS

To support Kerberos single sign-on, you have to configure the BusinessObjects clients on the IIS to use integrated Windows authentication.

To configure the clients for Windows authentication

1. On the IIS, in the Internet Information Services window, expand the tree on the left and go to businessobjects under Default Web Site.
2. Right-click businessobjects and select Properties.
3. On the Directory Security tab, click Edit.
4. Turn off Anonymous Access.
5. Turn on Integrated Windows Authentication.
6. Click OK, and then click OK again.
7. Repeat the above for crystalreportviewer.

Configuring the Internet Explorer browser on a client machine

To support Kerberos end-to-end single sign-on, you have to configure the Internet Explorer (IE) browser on the BusinessObjects Enterprise client machines. This includes:

• Setting up the client machines for integrated Windows authentication.
• Adding the IIS to the trusted sites.

Note:    

• If configuring the IIS for single sign-on to the database only, you do not need to configure the browser for single sign-on. See also Configuring IIS for single sign-on to databases only.
• You can automate the following steps through a registry key. For details, refer to you Windows documentation.

To configure the IE browser on the client machines

1. On the client machine, open an Internet Explorer browser window.
2. Enable integrated windows authentication:
1. Click Tools > Internet Options. The Internet Options dialog box appears.
2. Click the Advanced tab.
3. Navigate to the Security settings.
4. Click the Enable integrated windows authentication option, and then click Apply.
3. Add the IIS to the Trusted sites. You can enter the full domain name of the site:
1. Click Tools > Internet Options. The Internet Options dialog box appears.
2. Click the Security tab.
3. Click Sites.
4. Click Advanced.
5. Type in the web site for the IIS, and then click Add.
6. Click OK, and then click OK twice more to close the Internet Options dialog box.
4. Close the Internet Explorer browser windows and then open them again for the changes to take effect.
5. Repeat the above steps on each BusinessObjects Enterprise client machine.