How to Connect to ODI Repository with External Authentication

When ODI repository is configured for external authentication against WebLogic Server’s embedded LDAP server, we have to place the ODI security files ‘cwallet.sso’ and ‘jps-config-jse.xml’ at appropriate locations.

When external configuration is configured for ODI repository, ‘cwallet.sso’ and ‘jps-config-jse.xml’ files will be generated and placed at <MiddleWare_Home>/user_projects/domains/bifoundation_domain/odi-client-config/embedded

Steps:

1. Copy cwallet.sso and jps-config-jse.xml from:
   < MiddleWare_Home>/user_projects/domains/bifoundation_domain/odi-client-config/embedded
   To:
   <ODI_Home>/oracledi/client/odi/bin

2. Edit ‘odi.conf’ file located at <ODI_Home>/oracledi/client/odi/bin, by default JPS configuration file name is set to ‘./jps-config.xml’ change it to ‘./jps-config-jse.xml’
   Before change
   AddVMOption -Doracle.security.jps.config=./jps-config.xml

Revolutionize Your Business With Generative AI

From product design and software development to virtual agents, content creation, and reporting, GenAI is transforming business. Our AI experts help you unlock GenAI’s full potential and drive growth.

Let’s Get Started

          After change
          AddVMOption -Doracle.security.jps.config=./jps-config-jse.xml

         NOTE: If this step is not done, ODI will look for ‘./jps-config.xml’ file instead ‘./jps-config-jse.xml’ and throws error message ‘ODI-10188: Error while login from OPSS<…>/jps-config.xml (No such file or directory).’

3. If the BI Applications Administrator password or any ODI users’ passwords were changed, administrators need to regenerate security files ‘cwallet.sso’, ‘jps-config-jse.xml’ and replace the existing files in all ODI Studio instances.

Regenerating Security Files:

1. Execute the wlst.sh script:

ORACLE_HOME/common/bin/wlst.sh <MW_Home>/Oracle_ BI1/bifoundation/install/createJPSArtifactsODI.py embedded –ADMIN_USER_NAME <Administrator> –DOMAIN_HOSTNAME <Hostname> –DOMAIN_PORT 7001 –DOMAIN_HOME_ PATH <MW Home>/user_projects/domains/bifoundation_domain Where ADMIN_USER_NAME is the WebLogic Server administrator user.

2. Updated JPS configuration file and credential wallet are created at location:<MW_Home>/user_projects/domains/bifoundation_domain/odi-client-config/embedded

3. Copy these updated files to <ODI_Home>/oracledi/client/odi/bin on all ODI Studio instances.