Oracle E-Business Suite - Oracle Business Intelligence Enterprise Edition 11g Integration



Similar documents
ORACLE BUSINESS INTELLIGENCE WORKSHOP

OBIEE 11g Security it s as easy as 1-2-3!

How To Create An Easybelle History Database On A Microsoft Powerbook (Windows)

Oracle Business Intelligence 11g OPN Advanced Workshop

JD Edwards EnterpriseOne Tools. 1 Understanding JD Edwards EnterpriseOne Business Intelligence Integration. 1.1 Oracle Business Intelligence

OBIEE Cloning. Cloning the OBIEE 11g database migration to a new host. Ashok Thiyagarajan ADVANS MARLBOROUGH, MA AND CHENNAI, INDIA

Administering Cisco ISE

Build an ArcGIS Online Application

NSi Mobile Installation Guide. Version 6.2

Sage Intelligence Financial Reporting for Sage ERP X3 Version 6.5 Installation Guide

BusinessObjects Enterprise XI Release 2

QUANTIFY INSTALLATION GUIDE

Reconfiguring VMware vsphere Update Manager

Setting up the Oracle Warehouse Builder Project. Topics. Overview. Purpose

Changing Your Cameleon Server IP

Video Administration Backup and Restore Procedures

WhatsUp Gold v16.1 Installation and Configuration Guide

<Insert Picture Here> Oracle WebCenter Spaces and Oracle BI Applications Configuration

Integrating LANGuardian with Active Directory

Oracle Business Intelligence Enterprise Edition LDAP-Security Administration. White Paper by Shivaji Sekaramantri November 2008

FileMaker Server 14. FileMaker Server Help

SOFTWARE INSTALLATION INSTRUCTIONS CLIENT/SERVER EDITION AND WEB COMPONENT VERSION 10

How to Move an SAP BusinessObjects BI Platform System Database and Audit Database

How to Access Coast Wi-Fi

How to Copy A SQL Database SQL Server Express (Making a History Company)

<Insert Picture Here>

Citrix EdgeSight for Load Testing User s Guide. Citrix EdgeSight for Load Testing 3.8

LepideAuditor Suite for File Server. Installation and Configuration Guide

Configuring SSL in OBIEE 11g

Cloud Authentication. Getting Started Guide. Version

IIS, FTP Server and Windows

Kaseya 2. Installation guide. Version 7.0. English

Enabling Kerberos SSO in IBM Cognos Express on Windows Server 2008

OneLogin Integration User Guide

Decision Support AITS University Administration. EDDIE 4.1 User Guide

User guide. Business

Business Portal for Microsoft Dynamics GP Field Service Suite

Setting up an MS SQL Server for IGSS

WhatsUp Gold v16.3 Installation and Configuration Guide

Data Warehouse Troubleshooting Tips

Crystal Reports Installation Guide

NCAA Single-Source Sign-On System User Guide

HOW TO CONNECT TO FTP.TARGETANALYSIS.COM USING FILEZILLA. Installation

Migrating helpdesk to a new server

Tool Tip. SyAM Management Utilities and Non-Admin Domain Users

Initial Setup of Microsoft Outlook 2011 with IMAP for OS X Lion

User Guide. Version 3.2. Copyright Snow Software AB. All rights reserved.

HDAccess Administrators User Manual. Help Desk Authority 9.0

Oracle Enterprise Manager. Description. Versions Supported

Security Guidelines for MapInfo Discovery 1.1

Preparing to Install SQL Server 2005

ENABLE LOGON/LOGOFF AUDITING

Installing LearningBay Enterprise Part 2

Upgrading from MSDE to SQL Server 2005 Express Edition with Advanced Services SP2

MadCap Software. Upgrading Guide. Pulse

FieldIT Limited FieldIT CRM. Installation Manual v1.3.i3 (Enterprise Install)

NovaBACKUP xsp Version 15.0 Upgrade Guide

Dynamic DNS How-To Guide

How To Use Senior Systems Cloud Services

WhatsUp Gold v16.2 Installation and Configuration Guide

SC-T35/SC-T45/SC-T46/SC-T47 ViewSonic Device Manager User Guide

Installation Guidelines (MySQL database & Archivists Toolkit client)

Secret Server Installation Windows 8 / 8.1 and Windows Server 2012 / R2

Configuring Color Access on the WorkCentre 7120 Using Microsoft Active Directory Customer Tip

Monitoring Oracle Enterprise Performance Management System Release Deployments from Oracle Enterprise Manager 12c

Lepide Software. LepideAuditor for File Server [CONFIGURATION GUIDE] This guide informs How to configure settings for first time usage of the software

INTRODUCTION TO ATRIUM... 2 SYSTEM REQUIREMENTS... 2 TECHNICAL DETAILS... 2 LOGGING INTO ATRIUM... 3 SETTINGS... 4 NAVIGATION PANEL...

Contents About the Contract Management Post Installation Administrator's Guide... 5 Viewing and Modifying Contract Management Settings...

System Administration Training Guide. S100 Installation and Site Management

LAE 5.1. Windows Server Installation Guide. Version 1.0

Audit Management Reference

Using SQL Reporting Services with Amicus

Installing and Configuring Login PI

Configuring Controller 8.2 to use Active Directory authentication

Active Directory integration with CloudByte ElastiStor

WatchDox for Mac User Guide

ICONICS Using the Azure Cloud Connector

EMC Documentum Webtop

Oracle Business Intelligence Applications

Perceptive Intelligent Capture Solution Configration Manager

Infinity Web Viewer Reference Guide

Oracle Enterprise Manager. Description. Versions Supported

Oracle Business Intelligence Server Administration Guide. Version December 2006

Moving the TRITON Reporting Databases

Configure Single Sign on Between Domino and WPS

Defender Token Deployment System Quick Start Guide

Installing Windows Server Update Services (WSUS) on Windows Server 2012 R2 Essentials

Velocity Web Services Client 1.0 Installation Guide and Release Notes

E-Notebook SQL13.0 Desktop Migration and Upgrade Guide

To install Multifront you need to have familiarity with Internet Information Services (IIS), Microsoft.NET Framework and SQL Server 2008.

Gómez Script Recorder

Team Foundation Server 2013 Installation Guide

Configuring Avaya Aura Communication Manager and Avaya Call Management System Release 16.3 with Avaya Contact Center Control Manager Issue 1.

Acrolinx IQ. Acrolinx IQ Plug-in for Adobe CQ Rich Text Editor Installation Guide Version: 2.9

Only LDAP-synchronized users can access SAML SSO-enabled web applications. Local end users and applications users cannot access them.

Deltek Costpoint New Installation Guide for Microsoft SQL Server

Installation Guide for Pulse on Windows Server 2008R2

Quick Start Guide. Installation and Setup

Sitecore Ecommerce Enterprise Edition Installation Guide Installation guide for administrators and developers

SINGLE SIGN-ON FOR MTWEB

Transcription:

Specialized. Recognized. Preferred. The right partner makes all the difference. Oracle E-Business Suite - Oracle Business Intelligence Enterprise Edition 11g Integration By: Arun Chaturvedi, Business Intelligence Architect & Phani Kottapalli, Technical Architect AST Corporation November 19, 2012 Applications Software Technology Corporation 1755 Park Street, Suite 100 Naperville, Illinois 60563 1.888.278.0002 www.astcorporation.com

Contents ABSTRACT... 1 PURPOSE... 1 PREREQUISITES AND ASSUMPTIONS... 1 EMBEDDING LINK TO NAVIGATE (EBS TO OBIEE)... 2 CREATE FUNCTION... 2 CREATE MENU... 4 ASSIGN MENU TO A RESPONSIBILITY... 5 ASSIGN RESPONSIBILITY TO USERS... 7 SETTING UP THE PROFILE... 8 MODIFYING THE OBIEE REPOSITORY FILE (RPD)... 11 SETUP THE CONNECTION POOLS... 11 SETUP THE INITIALIZATION BLOCK... 11 MODIFYING OBIEE CONFIGURATION FILES (XML)... 16 MODIFY AUTHENTICATIONSCHEMAS.XML... 16 MODIFY INSTANCECONFIG.XML... 18 MODIFY ACTIONFRAMEWORKCONFIG.XML... 19 CREATING APPLICATION ROLES... 22 CREATE APPLICATION ROLE IN EM... 22 ASSIGN ACCESS TO NEW APPLICATION ROLE... 24 ASSIGN PRIVILEGES TO CATALOG/SUBJECT AREA ACCESS... 25 ASSIGN PRIVILEGES TO DASHBOARDS & ANSWERS... 25 ASSIGN PERMISSIONS TO CATALOG COMPONENTS... 27 ASSIGN PERMISSIONS TO PRESENTATION SUBJECT AREAS 28 EMBEDDING LINK TO NAVIGATE BACK (OBIEE TO EBS)... 31 ACTION LINK TO EBS FORM... 31 PASSING CONTEXT TO EBS FORMS... 31 SIGN OUT AND SIGN IN... 33 TROUBLESHOOTING & TIPS... 35 COOKIE FOR INTEGRATION... 35 VERIFY VARIABLE VALUES FOR INTEGRATION... 35 CONNECTION POOL AND USE OF VARIABLES... 36 VERIFY APPLICATION ROLES BEING PASSES... 36 REFERENCES... 38 ORACLE DOCUMENTATION... 38 Page i

Abstract PURPOSE What if you want to use users defined in your Oracle E-Business Suite for login and use Oracle Business EE/BI Applications? They can login into EBS using their username/password and navigate to OBIEE so they do not have to remember two usernames and passwords separately. This document details the steps required to integrate Oracle BI Applications (7.9.6.3) with Oracle E- Business Suite Applications R12.1.3 in the following ways: Single Sign-On first into Oracle E-Business Suite R12.1.3 and have that authentication passed through to Oracle BI EE 11g Embed links to Oracle BI EE 11g dashboard/answers in Oracle E-Business Suite pages Create Action Links within Oracle BI EE 11g reports and dashboards that take you back into Oracle E-Business Suite in context Activate Sign-Out Link within Oracle BI EE 11g that take you back into Sign-In page of your choice (Oracle E-Business Suite or Oracle BI EE) PREREQUISITES AND ASSUMPTIONS This document is using instance with software versions. Integration steps for other versions may vary. o Oracle E-Business Suite R12.1.3 o Oracle BI EE 11g (11.1.1.5) o Oracle Business Applications 7.9.6.3 For Oracle EBS R12, there are no pre-requisite patches required since base R12 has all the functionality that OBIEE leverages, namely the OBIEE profile is defined in b5869360.ldt, OracleOasis.jsp and APP_SESSION package which are in base R12. Please make backup of all files before making changes (i.e. repository, configuration files, catalog etc.) As an example: o We will create two responsibilities in EBS (OBIEE-Financials & OBIEE-Projects) and users will have access to Financial Analytics or Project Analytics based on these responsibilities. o OBIEE-Financials: This application role will have access to only Finance Analytics (Dashboard and Subject Areas) o OBIEE-Projects: This application role will have access to only Project Analytics (Dashboard and Subject Areas) Page 1

Embedding Link to Navigate (EBS to OBIEE) To embed a link in Oracle E-Business Suite that opens Oracle Business Intelligence dashboards/answers, you need to create a form functions, menu and responsibility. Before you begin, log in to Oracle E-Business Suite as the system administrator. Then, select the System Administrator responsibility from the responsibility navigator pane on the left. The available menus appear on the right. Follow the steps in this section to create the following objects, in sequence: o Function o Menu o Responsibility o User o Profile Figure 1: Login to Oracle E-Business Suite CREATE FUNCTION From the Application menu, select Function. The Form Functions dialog appears. Page 2

Figure 2: Form Functions Dialog In Description tab of Form Function: Enter the name of the function in the Function Field Enter the User Function Name Enter a description Save your changes using the Save button on the toolbar In Properties tab of Form Function: Specify the Type as SSWA jsp function Page 3

In Web HTML tab of Form Function: For the HTML Call, enter one of the following options: To link to answers, enter OracleOasis.jsp?mode=OBIEE&function=Answers To link to dashboards, enter OracleOasis.jsp?mode=OBIEE&function=Dashboard Save your changes using the Save button on the toolbar CREATE MENU From the Application menu, select Menu. The Menus dialog appears. Page 4

Enter the name of the Menu Enter a User Menu Name For Function, enter the name of the function(s) created in the previous section (i.e. OBIEE-DASBOARD and OBIEE-ANSWERS) Save you changes using the Save button on the toolbar, and then close the Menus dialog. ASSIGN MENU TO A RESPONSIBILITY You can create a new responsibility or an existing responsibility can be used. Below steps shows how to create a new responsibility: From the Security Menu, Click on Responsibility and select Define Enter the name of the responsibility ( OBIEE-Financials ) Page 5

Select the application for which the responsibility is being created Specify a unique Responsibility Key (OBIEE-Financials) For Available Form, Select Oracle Self Service Web Applications For Data Group, enter Standard for Name and re-enter the application name for Application For Menu, enter the name of the menu you created in the previous section (OBIEE) Save you changes using the Save button on the toolbar, and then close the responsibilities dialog. Repeat same steps given above to create another responsibility name: OBIEE- Projects Page 6

ASSIGN RESPONSIBILITY TO USERS You can create a new user or an existing users can be used. Below steps shows how to create a new user: From the Security Menu, Click on User and then Select Define Enter the name of the user Specify the responsibilities that this user will have access to. (OBIEE-Financials or OBIEE-Projects) Page 7

Save you changes using the Save button on the toolbar, and then close the Users dialog. SETTING UP THE PROFILE Click on Profile and then select System Profile Select Responsibility and then enter the name of the responsibility which you created earlier (OBIEE-Financials) Enter %Business Intelligence% in the Profile field Page 8

Click Find On the resulting screen, specify the Oracle Business Intelligence URL. For example: Page 9

http://my_server.domain.com:port (http://otap1.lahd.pola:9704) For port, enter the Web server port where Oracle Business Intelligence is running (for example, 9704). Save your changes using the save button on the toolbar Repeat same steps given above for another responsibility name: OBIEE-Projects Save your changes using the save button on the toolbar Note: The BI URL should be the fully qualified hostname including the domain name. It shouldn t be an IP Address. Page 10

Modifying the OBIEE Repository File (rpd) You have to modify OBIEE repository file (rpd) for EBS-OBIEE integration. If you haved implemented BI Application, all required variables, connections pools will already be there for you. If not, you need to create them manually using this document as an example. SETUP THE CONNECTION POOLS In the Oracle BI Administration tool, open the rpd in offline mode In physical layer, select the Oracle EBS OLTP Initblocks Connection Pool On the Connection Scripts tab, the value of Execute on Connect property should be: call /* valueof(nq_session.acf) */ APP_SESSION.validate_icx_session( valueof(nq_session.icx_session_cookie) ) SETUP THE INITIALIZATION BLOCK o o o o o Open the rpd From Menu Bar, select Manage Variables Initialization Block Check whether the Initialization Block EBS Security Context exists or not. If not, please follow steps a - j mentioned below. If it exists, please skip steps (a) and (b) below, start with (c.) and verify that the settings for this initialization block is similar to as mentioned here: a. From the Action menu, select new and then select New, then Session and then Initialization Block b. Enter/Select the name of the initialization block EBS Security Context c. If Initialization Block EBS Security Context is disabled, Right click on it and select Enable. d. For default Initalization string enter the following: select FND_GLOBAL.RESP_ID, Page 11

FND_GLOBAL.RESP_APPL_ID, FND_GLOBAL.SECURITY_GROUP_ID, FND_GLOBAL.RESP_NAME, FND_GLOBAL.USER_ID, FND_GLOBAL.EMPLOYEE_ID, FND_GLOBAL.USER_NAME, FND_GLOBAL.RESP_NAME from dual e. For Connection Pool, Click Browse and select the Oracle EBS OLTP Initblocks Connection Pool f. Clock Ok g. Click Edit Data Target h. Create the following session variables (in same order): OLTP_EBS_RESP_ID OLTP_EBS_RESP_APPL_ID OLTP_EBS_SEC_GROUP_ID OLTP_EBS_RESP_NAME OLTP_EBS_USER_ID OLTP_EBS_EMPLOYEE_ID USER ROLES Note: To add variable USER at the end of this list, follow steps given below. - First, Delete existing session variable USER - In initialization block EBS Security Context Click on Edit Data Target Delete existing target variable OLTP_EBS_USER Add new target variable USER Page 12

Similarly, create seesion variable ROLES i. Click ok j. Select Required for authentication checkbox. k. Click on ok. Note: In this example: We already have Initialization Block EBS Security Context in repository. If this is disabled by default, please select, right-click and Enable it. We are not enabling Authentication and Authorization initialization blocks Page 13

Finally, Initialization block EBS Security Context should look like as given below. Page 14

Session Variables created by this process: USER, ROLES Page 15

Modifying OBIEE Configuration Files (xml) You need to modify few OBIEE configuration files to enable EBS OBIEE integration for user security. After making changes in all XML configuration files, Restart Oracle Business Intelligence services. MODIFY AUTHENTICATIONSCHEMAS.XML This file can be found on server at: ORACLE_HOME/bifoundation/web/display Example: /u01/oracle/prod/oracle_bi1/bifoundation/web/display o o Open the file authenticationschemas.xml for editing. Find the following element in the file: <AuthenticationSchema name="ebs-icx" o Locate the sub-element RequestVariable source="cookie" and change the value of the nameinsource attribute from ICX_SESSION to the name of the EBS ICX authentication cookie prefix. <RequestVariable source="cookie" type="auth" nameinsource="test" bivariablename="nq_session.icx_session_cookie" /> Note: Ask your Oracle E-Business Suite administrator for the name of the EBS ICX authentication cookie if you do not know it. Alternatively, follow these steps to find the cookie name: Log in to Oracle E-Business Suite. Enter the following text in the address bar of your browser: javascript:write(document.cookie) The cookie is displayed. For example: TEST=hEXoGr7ZPJW0ZDVE3gTU7YPM4d The value you need to provide in authenticationschemas.xml is the prefix of the EBS ICX authentication cookie. In the previous example, the EBS ICX authentication cookie is TEST=hEXoGr7ZPJW0ZDVE3gTU7YPM4d, and the prefix is TEST. In the same entry (RequestVariable source="cookie"), ensure that the value of the bivariablename attribute is the same as the value you entered as part of the connection script when you created the connection pool for the Oracle E-Business Suite database. Find the following element: <SchemaKeyVariable source="cookie" Change the value of the nameinsource attribute from ICX_SESSION to the name of the EBS ICX authentication cookie prefix (i.e. TEST). For example: <SchemaKeyVariable source="cookie" nameinsource="test" forcevalue="ebs-icx"/> Save and close the file. Page 16

Original XML: <!-- Scheme for Oracle EBS Apps ICX session integration --> <AuthenticationSchema name="ebs-icx" displayname="oracle ebusiness Applications ICX Session" options="nologoffui nologonui" > <!-- Note: The name of the cookie here is site-dependent and needs to be customized. --> <!-- The URL parameter name is fixed and should not be changed. --> <RequestVariable source="cookie" type="auth" nameinsource="icx_session" bivariablename="nq_session.icx_session_cookie"/> <RequestVariable source="url" type="informational" nameinsource="acf" bivariablename="nq_session.acf"/> </AuthenticationSchema> Modified XML: <!-- Scheme for Oracle EBS Apps ICX session integration --> <AuthenticationSchema name="ebs-icx" displayname="oracle ebusiness Applications ICX Session" options="nologoffui nologonui" > <!-- Note: The name of the cookie here is site-dependent and needs to be customized. --> <!-- The URL parameter name is fixed and should not be changed. --> <RequestVariable source="cookie" type="auth" nameinsource="test" bivariablename="nq_session.icx_session_cookie"/> <RequestVariable source="url" type="informational" nameinsource="acf" bivariablename="nq_session.acf"/> </AuthenticationSchema> Original XML: <!-- Note: The name of the cookie here is site-dependent and needs to be customized. --> <SchemaKeyVariable source="cookie" nameinsource="icx_session" forcevalue="ebs-icx"/> Modified XML: <!-- Note: The name of the cookie here is site-dependent and needs to be customized. --> Page 17

<SchemaKeyVariable source="cookie" nameinsource="test" forcevalue="ebs-icx"/> MODIFY INSTANCECONFIG.XML This file can be found on server at: ORACLE_INSTANCE/config/OracleBIPresentationServicesComponent/coreapplication_obipsn Example: /u01/oracle/prod/instances/obprod/config/oraclebipresentationservicescomponent/coreapplicati on_obips1 Open the file instanceconfig.xml for editing. Locate the <Authentication> element. Include EBS-ICX in the list of enabled schemas. For example: o <EnabledSchemas>UidPwd,Impersonate,UidPwd-soap,Impersonate-soap,EBS- ICX</EnabledSchemas> Ignore the comment in instanceconfig.xml that says this setting is centrally managed. EBS- ICX must be manually added to the EnabledSchemas element. If you want to have Sign-Out link in OBIEE page (so you can log out from OBIEE and go to any webpage of you choice, for example EBS login page); You need to perform the following steps in order to get the Log out (Sign out) link displayed in OBIEE 11g. Inside the <Authentication> section, add the following tag block <SchemaExtensions> as given below: <! Adding Logout Link > <SchemaExtensions> <Schema name="ebs ICX" logonurl="{your SSO logon URL}" logoffurl="{your logoff URL}"/> </SchemaExtensions> <! Adding Logout Link > As example, you may use the following log-off / log-on URL options: EBS Homepage: http://<your EBS server:port>/oa_html/oa.jsp?oafunc=oahomepage Analytics logoff: http://<your BI server:port>/analytics/saw.dll?logoff Analytics logon : http://<your BI server:port>/analytics/saw.dll?bieehome&startpage=1 Save and close the file. Page 18

Original XML: <Authentication> <!--This Configuration setting is managed by Oracle Business Intelligence Enterprise Manager--> <EnabledSchemas>UidPwd,Impersonate,UidPwd-soap,Impersonatesoap</EnabledSchemas> </Authentication> Modified XML: <Authentication> <!--This Configuration setting is managed by Oracle Business Intelligence Enterprise Manager--> <EnabledSchemas>UidPwd,Impersonate,UidPwd-soap,Impersonatesoap,EBS-ICX</EnabledSchemas> <!--Adding Logout Link--> <SchemaExtensions> <Schema name="ebs-icx" logonurl="http://epap1.lahd.pola:8016" logoffurl="http://epap1.lahd.pola:8016"/> </SchemaExtensions> <!--Adding Logout Link--> </Authentication> This file can be found on server at: MODIFY ACTIONFRAMEWORKCONFIG.XML <Oracle Middleware Home>\user_projects\domains\bifoundation_domain\config\fmwconfig\biinstances\coreapplication Example: /u01/oracle/prod/user_projects/domains/bifoundation_domain/config/fmwconfig/biinstances/coreapplication This change is needed when you create action link inside OBIEE to navigate back to Oracle EBS form. Original XML: <obi-action-config xmlns:xsi="http://www.w3.org/2001/xmlschemainstance" xsi:nonamespaceschemalocation="afconfig.xsd"> <aliases/> <registries/> Page 19

<content-types> <content-type> <typename>webservices</typename> <displayname>web Services and BPEL Processes</displayname> <actiontype>webserviceactiontype</actiontype> </content-type> <content-type> <typename>misc</typename> <displayname>mixed Services</displayname> <actiontype>urlactiontype</actiontype> </content-type> </content-types> <accounts/> </obi-action-config> Modified XML: <?xml version="1.0" encoding="utf-8"?> <obi-action-config xmlns:xsi="http://www.w3.org/2001/xmlschemainstance" xsi:nonamespaceschemalocation="afconfig.xsd"> <aliases/> <registries/> <content-types> <content-type> <typename>webservices</typename> <displayname>web Services and BPEL Processes</displayname> <actiontype>webserviceactiontype</actiontype> </content-type> <content-type> <typename>misc</typename> <displayname>mixed Services</displayname> <actiontype>urlactiontype</actiontype> </content-type> </content-types> <accounts/> Page 20

<ebusinesssuiteconfig> <visible>true</visible> </ebusinesssuiteconfig> </obi-action-config> After making changes in all XML configuration files, Restart Oracle Business Intelligence services. Page 21

Creating Application Roles You need to create an application role which must be same as responsibility name you created in EBS (in this example, we created EBS responsibility OBIEE-Financials so we need to create application role name OBIEE-Financials using Oracle Enterprise Manager 11g. To access to subject areas and catalog, we can add this new application role to an eixisting application role as a member (in this example, it will be member of BIAuthor ) or we can use these newly created application roles without using any other existing application roles. In this example, we will use newly created application roles directly; without using any existing application roles. CREATE APPLICATION ROLE IN EM Login to Enterprise Manager 11g using administrator user (i.e. weblogic) Navigate to Business Intelligence coreapplication Right click on coreapplication : Security Application Role Click in Create Enter Role Name, Display name, Description [ OBIEE-Financials ] Click OK Repeat same steps to create anoter application role: OBIEE-Projects Page 22

Note: No need to assign members or users in these application role here in Enterprise Manager. NOTE: You Application Role name must be the same as the responsibility name you created in EBS. Page 23

ASSIGN ACCESS TO NEW APPLICATION ROLE If you want to use an existing application role to have same access/privileges for newly created application role, we can assign newly created application role to existing roles BIAuthor You can also use newly created application role directly; without using any existing application role Using existing application role BI Author to use it s access level for newly created application role (for example: OBIEE ) Click on existing role name BIAuthor Click Add Application Role in Members section Search, move OBIEE application role name from left to right pane (Selected Roles), Click OK Click on OK Now, newly created application role OBIEE is member of existing application role BIAuthor (which already have privileges for subject areas and catalog) Page 24

Assign Privileges to Catalog/Subject Area Access We need to assign appropriate access to application role inside Dashboard s Administration area so users related to new responsibility can access catalog as per requirement. ASSIGN PRIVILEGES TO DASHBOARDS & ANSWERS Login to BI Analytics using administrator type user (such as weblogic) Click on Administration Link Click on Manage Privileges Link Add Application Role OBIEE-Financials and OBIEE-Projects to give access to Dashboard and Answers Page 25

Add new application roles in appropriate Subject Area sections Assign other privileges as required You may apply appropriate access to other areas as shown in following screenshot Click on Back and sign-out. Page 26

ASSIGN PERMISSIONS TO CATALOG COMPONENTS Login to BI Analytics using administrator type user (such as weblogic) Click on Catalog link Navigate to appropriate folder name within Shared Folders Click on More drop-down and then select Permissions Page 27

Select No Access for Authenticated User Select Full Control for newly created application role. OBIEE-Financials for Financials folder OBIEE-Projects for Projects folder Select OK Note: For all shared folders which you do not want to show for any users, Select No Access for Authenticated User. ASSIGN PERMISSIONS TO PRESENTATION SUBJECT AREAS In repository s presentation subject area, you need to assign permissions to newly created application role (i.e. OBIEE-Financials, OBIEE-Projects ). Check permission property tab for all related subject areas (in presentation layer) and make appropriate changes for appropriate application role. i.e. select Read, Read/Write, No Access radio buttons etc Using BI Administration desktop tool, open repository in ONLINE mode. Page 28

In presentation layer, repeat following to all subject areas where you want to assign permissions to newly created Application Role. Select presentation subject area, right click to open property tab Check-Out to make changes in repository Click Permission to open permission tab Select No Access radio button for Everyone application role Select Read or Read/Write radio button for newly created application roles as per your requirement. Click OK Check-in the changes, save the repository (in Online mode) Assign appropriate permissions to all subject areas related to Financial Analytics. (for OBIEE Financials role) Page 29

Assign appropriate permissions to all subject areas related to Project Analytics. (for OBIEE- Projects role) NOTE: You are assigning these permissions in ONLINE mode so you may need to check and validate them again whenever you are deploying repository file. Page 30

Embedding Link to Navigate Back (OBIEE to EBS) You can choose few options when you want to navigate back to EBS from OBIEE. In this document, we will discuss 2 options (a) Navigate back to Oracle EBS form using Action Link (b) Sign-Out from OBIEE and show any login web page of our choice (example, EBS login page or BI Analytics login page). ACTION LINK TO EBS FORM Configure Oracle BI EE Action Framework: Modify ActionFrameworkConfig.xml as per instruction given above. Include the following element: <ebusinesssuiteconfig><visible>true</visible></ebusinesssuiteconfig> Save and close the file PASSING CONTEXT TO EBS FORMS Identify the e-business Suite Form that is to be linked to. Identify the parameters required by the Form/Page. Please refer to e-business Suite Documentation for details. Create a new Action which will enable OBIEE to call the e-business Suite Target form. Log into OBIEE Click on New -> Action In the Resultant Screen, Select Navigate to e-business Suite Page 31

In the resultant screen, two mandatory parameters, FunctionCode and Connection pool need to be specified. For FunctionCode, Specify the function code of the target form which need to be launched. Also, Specify the connection pool (mentioned under section rpd changes ). In addition to these two mandatory parameters, create new parameters which has the same name as the identified parameter (Identified in Step 1) and specify a value. For better user experience, Mark the FunctionCode and ConnectionPool parameters as Hidden. Save the Action Navigate to location where the Action is saved and Click on Execute to test the Action Clicking on Execute should launch e-business Suite Form. The Action Link created above can be used in Analysis/Dashboards. For details, how to use Action Links in Analysis/Dashboard, Refer to Oracle Business Intelligence Enterprise Edition Page 32

documentation. Steps below provides a simple example on how to use Action Link in Analysis: Login into OBIEE Navigate to New->Analysis Select a Subject Area and then select a column on which the Action Link is to be set as an Interaction Navigate to Column Properties Click on Interaction tab Select Primary Interaction as Action Link under Value Click on + icon and Specify the Action Link (which was created in earlier step). Specify parameters if a dialog box for parameters is prompted. Set the value to be based on Column. Check the Hidden Checkbox. Click on ok. Save the Analysis Now, Test navigation as given below: Login to e-business Suite. Click on the OBIEE Answers link to navigate to OBIEE Open the newly created Analysis Click on the column value to navigate back to e-business Suite. SIGN OUT AND SIGN IN If you do not want go back to same Oracle EBS form after working in OBIEE, you can just signout from OBIEE and display any web page of your choice. When we add following tags in instanceconfig.xml file, sign-out link appears on home page (topright side of screen). You can define any URL which you want to see after sign-out (example: Login screen for EBS or BI Analytics) Follow instruction given above in this document. Page 33

<Authentication> <EnabledSchemas>UidPwd,Impersonate,UidPwd-soap,Impersonatesoap</EnabledSchemas> <!--This Configuration setting is managed by Oracle Business Intelligence Enterprise Manager--> <! -Adding Logout Link -> <SchemaExtensions> <Schema name="ebs-icx" logonurl="{your SSO logon URL}" logoffurl="{your logoff URL}"/> </SchemaExtensions> <!- Adding Logout Link -> </Authentication> Page 34

Troubleshooting & Tips COOKIE FOR INTEGRATION How to get cookie s value which is being used for EBS-OBIEE integration? a. Log in to Oracle E-Business Suite. Enter the one of following text in the address bar of your browser: o javascript:alert(document.cookie), o javascript:document.write(document.cookie) o javascript:document.writeln(document.cookie); b. The cookie is displayed. c. For example: TEST=hEXoGr7ZPJW0ZDVE3gTU7YPM4d VERIFY VARIABLE VALUES FOR INTEGRATION 1. How to verify the Responsibility Name defined in EBS is being passed to OBIEE? 2. Get cookie s value as per steps given above 3. Execute following command first and then SQL in sql*plus/toad etc call /* valueof(nq_session.acf) */ APP_SESSION.validate_icx_session('valueof(NQ_SESSION.ICX_SES SION_COOKIE)') Example: call /* valueof(nq_session.acf) */ APP_SESSION.validate_icx_session('hEXoGr7ZPJW0ZDVE3gTU7YP M4d') Execute this query against your EBS database: (Example: TEST) select FND_GLOBAL.RESP_ID, FND_GLOBAL.RESP_APPL_ID, FND_GLOBAL.SECURITY_GROUP_ID, FND_GLOBAL.RESP_NAME, FND_GLOBAL.USER_ID, FND_GLOBAL.EMPLOYEE_ID, FND_GLOBAL.USER_NAME from dual You should get values in result set. For example, RESP_NAME will have value OBIEE Page 35

CONNECTION POOL AND USE OF VARIABLES DSN and User values in Connection pool: I noticed that sometimes it works with repository variable name and sometime with complete TNS entry in it. Try it which style works in your case. a. (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=etdb1.lahd.pola)(PORT=1539))( CONNECT_DATA=(SERVICE_NAME=UAT)(INSTANCE_NAME=UAT))) b. VALUEOF(ORA_EBS_OLTP_DSN) and VALUEOF(ORA_EBS_OLTP_USER) VERIFY APPLICATION ROLES BEING PASSES Login to Oracle EBS using your username/password. Click on appropriate OBIEE related responsibility (example: OBIEE-Financials) When you come to BI Abalytics home page, click your username (top-right corner of screen) Click on My Account Click on Role and Catalog Groups Now, you should see the Responsibility Name which you selected in Oracle EBS (which is your Application Role defined in Oracle Enterprise Manager) Page 36

Page 37

References ORACLE DOCUMENTATION Please refer to Chapter 2 from document below: (2 Integrating Security for Oracle BI Applications) http://download.oracle.com/docs/cd/e20490_01/bia.7963/e19042/security.htm#cjadeaeh Please refer to Chapter 6 from document below: (6 Integrating with Oracle E-Business Suite Security) http://docs.oracle.com/cd/e21764_01/bi.1111/e16364/ebs_actions.htm#cjadifba Page 38

Oracle E-Business Suite -- Oracle Business Intelligence Enterprise Edition 11g Integration November 19, 2012 AST Corporation 1755 Park Street, Suite 100 Naperville, Illinois 60563 Phone : 888-278-0002 Fax : 630-778-1179 www.astcorporation.com Copyright 2012 AST Corporation AST Corporation is a privately held company founded in 1995 to serve commercial and public sector organizations in utilizing the full potential of their investment in Oracle Applications. We have built our practice by providing top quality full life cycle and turn-key consulting services for Oracle Applications implementation and upgrade projects, among other specific services. Our mission is to insure that you, as a valued client, receive the highest level of expertise and personalized service for your Enterprise Applications. We endeavor to help you realize the full benefit from your investment in software applications and integrate them seamlessly to your business processes.