I have been working on configuring OBIEE 11g to use Active Directory for authentication and an external table for Groups.  It has been a bit of a challenge primarily because I was not familiar with the Active Directory terminology and parameters, and so I was initially doing some guess work – about what the various parameters should be set to, and it was not very easy to determine what was and what was not correct.

Anyway, thanks to a few Oracle documents and a few blog articles I have made significant progress and I think I have it working properly now, and testing it thoroughly.

Below are some of the documents and articles that I used…

Here you will find some Oracle documentation:

http://docs.oracle.com/cd/E14571_01/bi.1111/e10543/toc.htm

http://docs.oracle.com/cd/E23943_01/bi.1111/e10543/privileges.htm#BIESC6054

A great intro article:

http://www.rittmanmead.com/2012/03/obiee-11g-security-week-understanding-obiee-11g-security-application-roles-and-application-policies/

An article directly related to the topic:

http://www.rittmanmead.com/2012/03/obiee-11g-security-week-connecting-to-active-directory-and-obtaining-group-membership-from-database-tables/

These provided some more details that helped me to understand the parameters better and be in a better position to work with the Active Directory administrator:

http://bimetrics.wordpress.com/2011/08/12/integrating-ms-active-directory-with-obiee-11g-in-weblogic-server/

http://obieeelegant.blogspot.com/2012/01/obiee-11g-integration-with-ldap.html

http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html

http://www.biztech.com/blog/2011/09/integrating-active-directory-with-obiee-11g/

Good luck!