SSO in chrome for SAP BI 4.1

[Former Member]

Hi All,

I have configured AD SSO for SAP BI 4.1 SP1 . The SSO is working fine in IE but not working in chrome . I have created the register key AuthNegotiateDelegateWhitelist under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome and add my web server url like http://mywebsever:8080/BOE/BI

I followed the below article

1887193 – I’m unable to perform SSO with BI using my Google Chrome browser

Please let me know wat I am doing wrong

Thanks in advance

Regards,
Pavithra P

[Former Member]

Hi All,

Thanks a lot for all your help.. I was able to successfully configure SSO in chrome by switching the service account to perform constrained delegation

Regards,

Pavithra P

[former_member205064]

check if SSO working on crome on other machine as well.

it could be machine specific or not working on all the machine with crome.

[Former Member]

Hi All,

The SSO is not working even for IE now in sap 4.1 . I restarted the tomcat and I am not finding "credentials obtained' message in stderr logs now

The system looks for a different kdc other than mentioned DNS server name and below is the error message

[DEBUG] Sun Nov 23 02:11:07 EST 2014 jcsi.kerberos: Available KDC found: /144.93.254.10:88

[DEBUG] Sun Nov 23 02:11:07 EST 2014 jcsi.kerberos: Sending message to KDC: /144.93.254.10:88

[DEBUG] Sun Nov 23 02:11:07 EST 2014 jcsi.kerberos: Sending TCP request: /144.93.254.10:88

[DEBUG] Sun Nov 23 02:11:28 EST 2014 jcsi.kerberos: Message send unsuccessful to KDC: 144.93.254.10:88

How can I restrict the system to use only the preferred KDC?

[former_member189884]

KBA states the following: 1958936 - How to force SSO to use a specific domain controller
(KDC)

BI 4.x

1. In the global.properties add the setting idm.kdc=kdc value
   where kdc value should be
   the FQDN or IP address of the domain
   controller you wish to send all SSO reguests to
2. If your BI 4 application still uses a web.xml (such as dswsbobje) then use
   the XI 3.1 instructions

[Former Member]

Hi Josh,

Thanks a lot.. SSO started working in IE again.

Still SSO is not working in chrome  

Can you please help me

Regards,

Pavithra P

[former_member189884]

Short of the KBA you reference that is all that is needed for chrome.

[former_member136842]

Hello,

please change the key to:

http://mywebserver.mydomain.com

Enter this information without the port and the /BOE/BI

Regards

-Seb.