MicroStrategy ONE

Developer Configuration for Integrated Authentication

To enable integrated authentication in a Windows MicroStrategy environment you will need to configure your MicroStrategy users and the Project sources.

Configure the Project Source

  1. In Developer right click on your Project Source.
  2. Click Modify Project Source.
  3. On the Connection tab, under Server Name, type the server name exactly as it appears is the Service Principal Name created in Active Directory Account Configuration with the format MSTRSVRSvc/<hostname>:<port>@<realm>.
  4. In the Advanced tab Use Integrated Authentication.

Mapping Users to Active Directory

  1. In Project Source open Administration > User Manager.
  2. Right click on a user and select Edit > Authentication > Metadata.
  3. Enter the Active Directory user log in under Trusted Authentication Request User ID.
  4. Click OK.

Linking Integrated Authentication Users to LDAP Users

When users log in to MicroStrategy using their integrated authentication credentials, their LDAP group memberships can be imported and synchronized.

By default, users' integrated authentication information is stored in the userPrincipalName LDAP attribute. If your system stores integrated authentication information in a different LDAP attribute, you can specify the attribute when you configure the import.

To Import LDAP User and Group Information for Integrated Authentication Users

  1. In Developer, log in to a project source. You must log in as a user with administrative privileges.
  2. From the Administration menu, select Server, and then select Configure MicroStrategy Intelligence Server.
  3. Expand the LDAP category, then expand Import, and then select Options.
  4. Select the Synchronize user/group information with LDAP during Windows authentication and import Windows link during Batch Import check box.
  5. Select the Batch import Integrated Authentication/Trusted Authentication unique ID check box.
  6. By default, users' integrated authentication IDs are stored in the userPrincipalName LDAP attribute. If your system stores integrated authentication information in a different LDAP attribute, click Other, and type the LDAP attribute that contains users' IDs.
  7. Click OK.