| For customers who store users and groups in a relational database or use a nonsupported Single Sign-On (SSO) product, implementing BusinessObjects Enterprise poses the following challenges: Replicating users and groups To fully exercise BusinessObjects Enterprise security and logging, users and groups must be replicated using batch scripts. Batch scripts themselves can be scheduled through BusinessObjects Enterprise. Logging in without a password SSO web server plugins expect down-stream providers to accept usernames in the request header as valid and authorized. BusinessObjects Enterprise expects a password and setting it as an empty string creates a security hole. Resetting the user password every time the user logs in is one work-around. Getting and setting user preferences Accessing user preferences and setting custom ones is easy with the getProfileString and setProfileString methods.
In BOEUtil you will find several functions that handle adding and removing users and groups; setting user properties, including arbitrary properties on the user profile; resetting user passwords; and managing group membership, including subgroups. |