Trusted Authentication

[hilfy]

Background:
We are implementing BO XI r2 using the .NET Web component adapter on a separate web server that is in the DMZ (the CMS is inside the firewall). The web interfaces will run under our existing portal which has its own SSO authentication process. We CANNOT turn on single sign on in IIS. We CANNOT use AD authentication as the web servers do not have access to AD.

Question:
We are trying to implement Trusted Authentication. I have a sample ASP.NET app written that logs in to the CMS without any problems. What changes do I need to make to the InfoView web.config file so that I can log the user into InfoView in code and the login page does not appear?

Thanks!
-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.

 

[jenny504]

Hi hilfy,


I use Bo version 5.1, I need the URL to log to webi without an authentication.

Thanks for your help
jenny

 

[hilfy]

Jenny,

Thanks for your response, but that's not going to work forme. I'm still authenticating users through the portal and I need to have the user automatically logged in to BOE because of the security model we're using - Guest has access to nothing. I've tried just going straight to the URL after I authenticate the user, but that doesn't work. I think I'll need to pass in the user session information, but I'm not sure how/where to do that.

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.

 

[hilfy]

After a couple of days of working with Tech Support, I've got it working! Users will log into our portal like they normally do and I can take the userID from their authentication token and, with trusted authentication and a special cookie, automatically log them in to InfoView. The C# code looks something like this:

			if (CanAuthenticate(ref TokenFromAnotherApp, ref userName))
			{
        SessionMgr sess = new SessionMgr();
        TrustedPrincipal tp = sess.CreateTrustedPrincipal(userName, "ATLBOE01");
        EnterpriseSession esess = sess.LogonTrustedPrincipal(tp);
        CrystalDecisions.Enterprise.WebControls.Identity ident =
          new CrystalDecisions.Enterprise.WebControls.Identity();
        ident.EnterpriseSession = esess;

//NOTE: use "MyIdentityCookie" for XI and "IdentityCookie" for XIr2
        HttpCookie identCookie = new HttpCookie("IdentityCookie", ident.GetToken());
        identCookie.Path = "/";
        Response.Cookies.Add(identCookie);
        // Redirect the user to the main page
        Response.Redirect("[URL unfurl="true"]http://localhost/businessobjects/Enterprise115/InfoView/logon.aspx");[/URL]
      }

-Dell


A computer only does what you actually told it to do - not what you thought you told it to do.