We have successfully implemented SSO using kerberos for Active Directory. I've configured the "weblogic.xml" file for analytics.ear file with all the obiee roles. So when a user who has access to any one of the subject area logs in fine. Now before we implemented SSO we had set of users who were simply "Authorized Users". So they could log in to OBIEE and atleast see public catalog and such. Now I tried to define "Authorized User" or "All" or something similar so that all authorized user in my org can atleast login to obiee. but they are still unable to login and they receive page canot found error. I really appriciate your help on this.
xmlns="http://www.bea.com/ns/weblogic/weblogic-web-app">
<context-root>analytics</context-root>
<security-role-assignment>
<role-name>SSORole</role-name>
<principal-name>BIUsers</principal-name>
<principal-name>BIAdmins</principal-name>
<principal-name>All</principal-name>
</security-role-assignment>
</weblogic-web-app>