BPM Admin Guide

User Setup and Single Sign On

This section discusses overall Maconomy user setup and single sign on.

This section contains the following topics:

  • User setup and single sign-on overview
  • Active desktop and Maconomy configurations
  • Sync
  • Configure a tenant in a multitenancy environment
  • Control which users to create
  • Error handling
  • Assign report and universe rights

In Maconomy, access to data is controlled by the user name (NameOfUser). If single sign-on (SSO) is not defined and used, a user must log in to BusinessObjects using the same user name to be able to access data.

However, most often SSO is defined both in Maconomy and BusinessObjects.

  • In Maconomy, a network user name is defined for each user. This network user name is equal to the active directory (AD) (Windows) user name. When you log in to the network, log-in is automatically performed in Maconomy using the network user name. Access to data is controlled by the user name with which the network user name is associated.
  • § In BusinessObjects, the AD (Windows) user name is the normal user name and thus equal to the network user name. To have access to Maconomy data, you create an alias for that user name. This alias is equal to the user name (NameOfUser) in Maconomy. When you log in to the network, log-in is also automatically performed in BusinessObjects using the user name. Access to the Maconomy data is via the alias that matches the user name (NameOfUser) in Maconomy.

The following figure illustrates this.

Example

  • In Maconomy, Anders Hansen uses AH as the network user name (and thus also AD log-in).
  • Anders Hansen logs in to the network and automatically logs in to Maconomy as AH.
  • This gives Anders Hansen access to all of the Maconomy data that his user name is defined to have access to.
  • When opening WebIntelligence in BusinessObjects, Anders Hansen is automatically logged in as AH.
  • The BusinessObjects user AH has the alias Anders Hansen. Therefore, the user has access to all of the Maconomy data that Anders Hansen is defined to have access to.
Note: With multi-user roles, Maconomy passes the login name as the user name.

Active Desktop and Maconomy Configurations

Users must exist as AD (Windows) users on the domain. The mapping in Maconomy must be set up properly so that each Maconomy user has his or her AD (Windows domain) user name specified in the Network Username field in the Users workspace in Maconomy.

For example, the person Anders Hansen might have the user name AHA on the domain. The Network user name for the Maconomy user Anders Hansen should therefore be filled in as AHA.