SSO not working in Production but UAT is fine

[Ravibalan]

Hello,

I have completed Windows AD SSO setup in BI 4.3 UAT environment, SSO login works fine by taking to the homepage.

I did the same setup in Production environment but SSO login alone not working, BI Launchpad is opening with login page. Manual login with AD authentication works fine.

Note: AD group appeared with Users list during update after Authentication setup, all checks were successful during the setup. AD group and Users were not migrated using promotion management.

AD group is at company level, so it is common between UAT & Production environment.

Only difference is I created a new service account as SPN didn't allow duplication with Prod server.

I am not sure what is wrong here, would greatly appreciate any assistance.

[mamartins]

As a best practice, do not run the UAT and PROD systems on the same host.

Please check these SAP notes:

• 2629070 - How to Securely Integrate BI 4.2 or 4.3 with Windows Active Directory and SSO in Distribut...
• 2825947 - Windows AD SSO fails with a logon screen or various generic error messages
• 1965433 - Setting up AD SSO when CMS is on Unix or Linux in BI4.x ***BEST PRACTICE***

[Ravibalan]

Hi Martin, Thanks for your reply.

UAT and Production are on different server, not on same host.

I replicated the setup as per note 2629070 for both servers. One is working fine but other is not.

All the checks and manual login is working fine as expected, only the silent sso is not working in Production server.