Strategy One

Integrated Authentication Login for Strategy Applications

Enabling integrated authentication login mode for Strategy Web

For Strategy Web users to be able to use their Windows credentials to log in to Strategy Web, you must enable integrated authentication as an available login mode. The procedure below describes the required steps for this configuration.

To Enable Integrated Authentication Login Mode for Strategy Web

  1. From the Windows Start menu, go to All Programs > Strategy Tools > Web Administrator.
  2. On the left, select Default Properties.
  3. In the Login area, for Integrated Authentication, select the Enabled check box.

    If you want integrated authentication to be the default login mode for Strategy Web, for Integrated Authentication, select the Default option

  4. Click Save.

Enabling Integrated Authentication Login Mode for Strategy Library

  1. On the machine where the Strategy Library application is installed, open the configOverride.properties file.
    • Windows: C:\Program Files (x86)\Common Files\MicroStrategy\Tomcat\apache-tomcat-8.0.30\webapps\MicroStrategyLibrary\WEB-INF\classes\config
    • Linux: <tomcat_directory>/webapps/MicroStrategyLibrary/WEB-INF/classes/config
  2. Add following entries to configOverride.properties:
    • auth.kerberos.config=: set to file path of krb5.conf file
    • auth.kerberos.keytab=: set to file path of file.keytab file
    • auth.kerberos.principal=: set to Service Principal Name (SPN) of the Library Web Server
    • auth.kerberos.debug=false
    • auth.kerberos.isInitiator=true

Enabling Integrated Authentication Login Mode for Strategy Mobile

To allow your Strategy Mobile users to use their Windows credentials to log into Strategy, you create a Mobile configuration, and select Integrated Authentication as the authentication method. For steps to create a Mobile configuration for your organization, see the Strategy Mobile Administration Help.