Package com.crystaldecisions.sdk.plugin.admin.ssoadmin

This package has been deprecated as of version 12.0.

See:
Description

Interface Summary

ISingleSignOnAdmin

Deprecated. As of version 12.0.

Package com.crystaldecisions.sdk.plugin.admin.ssoadmin Description

This package has been deprecated as of version 12.0. This package allows you to manage the cache expiry time for single sign-on (SSO) authentication. It is currently only compatible with Windows Active Directory authentication and Kerberos.

This functionality can be implemented by the following four BusinessObjects Enterprise servers:

• Central Management Server (CMS)
• Report Application Server (RAS)
• Crystal Reports Page Server
• Web Intelligence Report Server

To manage the cache expiry time for a given server you need to:

• Query the CMS repository for the server interface
• Retrieve the ISingleSignOnAdmin interface using the IServerBase.getSingleSignOnAdmin()
• Instantiate the class

Once you have instantiated the class you can determine the amount of time a user's security context will be stored in the server's cache. The security context is defined as a session ticket that is issued by the Windows Active Directory (AD) to a valid principal. It is initially stored in the CMS’s cache where it resides for a specified period of time. Once a request to schedule, view, or edit an object has been issued, the security context will be propagated to the appropriate server’s cache so that it can continue to access the database without prompting the user for security clearance.

The security context has an expiry time that is unrelated to the specific server’s cache expiry time. As a result, the CMS manages the security context's expiry time differently than the other three servers:

• The CMS uses a refresh mechanism to ensure that the principal’s security context is available for distribution to other servers until its cache expires. This is accomplished by the CMS using the security context to re-logon to itself. As a result the security context is re-generated and the expiry time is reset.
• However, the remaining three servers (RAS, Crystal Reports Page Server, and the Web Intelligence Report Server) will delete the contents of their cache based on whether the cache or the security context expires first.

For more information on SSO and Kerberos authentication, see the BusinessObjects Enterprise Administrator's Guide.

See Also:

CePropertyID.SI_MAPPED_GROUPS, CePropertyID.SI_ALIAS_AUTOADD, CePropertyID.SI_ALIAS_AUTOCREATE