HFM authentication using SSO Token
We built an interface using 'IKM SQL to Hyperion Financial Management Data' to load data from Planning into HFM. This is called from an ASP in HFM that delivers the parameters entered by business users (e.g entity) to configure interface execution at run time. We use 'Replace by security' mode to ensure a user can only load data for which it has been provisioned.
However, the IKM logs on HFM with user credentials taken from physical HFM Server definition in Topology:
# Target HFM connection properties
clusterName = "<%=snpRef.getInfo("DEST_DSERV_NAME")%>"
userName = "<%=snpRef.getInfo("DEST_USER_NAME")%>"
password = "<%=snpRef.getInfo("DEST_PASS")%>"
application = "<%=snpRef.getInfo("DEST_CATALOG")%>"
targetProps = HashMap()
targetProps.put(ODIConstants.SERVER,clusterName)
targetProps.put(ODIConstants.USER,userName)
targetProps.put(ODIConstants.PASSWORD,password)
targetProps.put(ODIConstants.APPLICATION_NAME,application)
...
# Get the writer
hfmWriter = HypAppConnectionFactory.getAppWriter(HypAppConnectionFactory.APP_HFM, targetProps);
That means, not the HFM provisions of the user who called the interface is used when loading the data into HFM but the provisions of a standard users (e.g. Admin User) defined in ODI Topology and 'Replace by Security' makes no sense here. For that reason we would like to pass the SSO token from the initial HFM session (ASP) to ODI and back to HFM. Passing the token through ODI is not a problem, but we couldn't find an appropriated connection property in IKM to pass the token back to HFM. Anyhow, we suppose there is such a property because HFM API supports that by default. Have anybody found this?