SAP Knowledge Base Article - Preview

1483762 - Configuring Manual Kerberos Authentication and/or SSO in Distributed Environments with XI 3.1 SP3 ***Best Practice***


  • This solution REQUIRES XI 3.1 SP3
  • If SP3 is not installed then please use KB 1261835 instead
  • If you are on BI 4.0 4.1 or 4.2 + see KBA 1631734
  • How to setup XI 3.1 with Active Directory Authentication and single sign on with kerberos
  • Configuration Guide for AD SSO



  • This document applies to XI 3.1 SP3 and later ONLY, it will not work on earlier versions

What's new in SP3

  • The vintela libraries that we used to use from XIR2 - XI 3.1 SP2 have been replaced with the latest version from quest
  • Constrained Delegation with java kerberos is now fully supported (although please constrain after initial configuration)
  • ktpass is no longer needed to modify the UPN of the service account
  • server tracing no longer requires keytab removal
  • AD sites no longer need to be specified (they are choosen automatically like following the rules of any windows server)
  • Overall the new document will simplify the entire process and allow quicker implementation of kerberos SSO
  • Over 10 known bugs (which used to be worked around in the old version) have been resolved
  • vintela is now known as, and commonly referred to as java SSO going forward


Crystal Reports Server 2008 V1 ; SAP BusinessObjects Business Intelligence Edge 3.1, standard package ; SAP BusinessObjects Business Intelligence platform 4.0 ; SAP BusinessObjects Business Intelligence platform 4.0, feature pack 3 ; SAP BusinessObjects Enterprise XI 3.1


  • how to configure directions documentation documents steps to follow vintela ventila vintella ventela set up setup config configuring Active Directory single sign on sign-on slient automatic logon
  • java tomcat websphere weblogic oracle application server jboss netweaver JDK java SDK development kit XI3 XI 3  XI 3.1 XI31 XIR3 XI 3.x zie MNHWW master KBA mkba mkb htkba htkb
, KBA , biauth , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.