SharePoint Products TechCenter >
SharePoint Products and Technologies Forums
>
SharePoint - Excel Services (pre-SharePoint 2010)
>
SSO and SSAS cubes via excel services
SSO and SSAS cubes via excel services
- I have a question.. will SSO work for this?
I have a SharePoint server setup in Domain1 (D1) and I have SSAS running in Domain2 (D2). A domain trust exists between the domains.
I have a Cube (CUBE1) on the D2 SSAS server with a role that restricts D1\USER1 to just a few customers.
If I open Excel manually and create a pivot table pointing to CUBE1 using the D1\USER1 I get filtered properly.
I want to be able to load a web part with an excel doc that will use the credentials of the logged in user (in sharepoint) to access the cube. Meaning if D1\USER1 logs into Sharepoint then I want them to see just the data in the cube (via excel) that they have access to. When D1\USER2 logs in and they have access to all customers via the roles of the cube then I want them to see everything..
Make sense? This can NOT be a uncommon thing. Maybe the two domains are...??
I have setup and got single sign on working in general.
So When D1\USER1 logs into Sharepoint and they go to access the cube in the web part. It will map that username to a D2\MOSSUSER account as the SSO database is set to do. That mapping has a SSO ID of USER1ID and that is what I setup in the excel doc... so it seems to work right?
BUT... the issue is that we have hundreds of users...I would need ONE SSO ID that will cover everyone, since I can only select one in the excel doc.
Basic question is... How can I get the logged on user in sharepoint to be the user that the excel services uses to connect to SSAS?
I know that SSO has individual mappings ans group mappings.. also that impersonation is needed???
I guess I just need to understand how this should be configured.
PLEASE HELP.
-Thanks in advance.
-Ken
Answers
- The short answer is that you can use an individual SSO application ID as you mentioned. That way you have one SSO ID that has multiple mappings, one for each user that you wish to map. You can map each user to their own individual user account and it is all managed under one application ID.
David- Marked As Answer byLambert QinMSFT, ModeratorFriday, October 09, 2009 2:24 AM
All Replies
- The short answer is that you can use an individual SSO application ID as you mentioned. That way you have one SSO ID that has multiple mappings, one for each user that you wish to map. You can map each user to their own individual user account and it is all managed under one application ID.
David- Marked As Answer byLambert QinMSFT, ModeratorFriday, October 09, 2009 2:24 AM
