Information Design Tool Windows Authenication Error


We recently installed a new BusinessObjects BI Platform 4.0 SP2 environment on a Windows 2008 R2 server, and I have installed the client tools along with LiveOffice on my desktop (win7).

I have successfully configured Windows AD in CMC along with SSO for LaunchPad. Everything works correctly.

Using Windows AD, I can successfully login to the Unverise Design Tool and Query as a service Designer, and LiveOffice with my windows credentials. However I can NOT login to the Information Design Tool. I can only login using the enterprise authenication.

I verfied that my windows ID is a member of the Administrator group in CMC.

The error I receive when I login is:

Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserName@DNS_DomainName, and then try again. (FWM 00006)

I'm out of options, how come all the other applications work with WindowsAD and not the Information Design Tool.

Please help,


  • SAP Employee

Hi Erik,

As per the note below there is additional configuration needed to get the SSO working for the IDT.

1621106 - How to configure Information Design Tool (IDT) for manual AD Login + SSO for BI 4.0


1. Edit the file: install_dir\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win32_x86\InformationDesignTool.ini.

Add the following lines to the end of the file:\bscLogin.conf\krb5.ini

For example:\WINNT\bscLogin.conf\WINNT\krb5.ini

2. Make sure the two files bscLogin.conf and krb5.ini are configured for Active Directory

authentication with Kerberos.

For details, see the section Using Kerberos authentication for Windows AD in the SAP

BusinessObjects Enterprise Administrator's Guide.

Can you test this please.

I hope this is a very helpful answer to you.

Kind regards,


5 View this answer in context