If you select WebSphere MQ Integrator (WMQI) / WBI Message Broker and/or WebSphere InterChange Server (WICS) as the workflow engine, without selecting the MQSeries Workflow / WebSphere MQ Workflow, then you will be asked to enter the information about the authentication and security type that you will use to authenticate the logged users to the BI Monitor Client, as long as you will not use the MQ Workflow authentication.
The following are the wizard screens that appear when you select WebSphere MQ Integrator (WMQI) / WBI Message Broker and/or WebSphere InterChange Server (WICS) as the workflow engine:
In the next screen, select the security mode you want to apply. You have the option to select one of the following security modes:
Local Security: The Local security mode allows you to register any user who is allowed to use the BI Monitor locally in the BI Monitor database, so that each registered user's record contains the user name and the password by which the logged user will be identified each time he/she logs in to BI Monitor Client.
LDAP Security: The LDAP (Lightweight Directory Access Protocol) security mode depends on acquiring the user authentication information from an external LDAP server. The LDAP Server is a stand-alone, external server that holds a database of all employees who have an identification record in the LDAP Server database. For the LDAP Authentication method, any registered user in the LDAP Server database can login to BI Monitor client. When the user enters his/her identification information (LDAP user name and password), the LDAP server will check the information. If he / she passes the authentication, then he will login to the BI Monitor. The BI Monitor database does not hold the registered users' passwords that are used for authenticating users. The BI Monitor database holds only the user name for setting the user's permissions.
Select the appropriate security mode and then click Next to continue.
The next screen appears only if you select the LDAP Security mode to let you enter the required LDAP configuration parameters as the following:
In the LDAP URL field: Type the LDAP Server URL and port number (for example ldap://ldapsrvr:389/)
On AIX and Solaris platforms, type the LDAP server IP address instead of the server name
The remaining parameters are needed to allow logging in to BI Monitor client using only the User ID, instead of having to supply the full Distinguished Name (DN). In this case, BI Monitor queries the LDAP Server for the full DN of this user using these parameters, and then uses the obtained full DN for login.
The required parameters are:
In the Server Bind DN field: Type a Distinguished Name (DN) for an LDAP Server authorized user that will be used for logging in to this LDAP Server, and performing the search in the LDAP users' tree.
In the Server Bind Password field: Type the password of the defined User DN.
The Server Bind DN and Server Bind Password fields are optional. If you leave these fields empty without specifying a user then the user anonymous will be used. In this case this user should have at least read/search access rights on the LDAP directory.
In the Naming Attribute Holding Login ID field: Type the name of the prefix that precedes the user ID in the LDAP Server database (i.e. CN, UID,...etc). The value of this parameter varies between the different types of LDAP Servers.
In the Base of Search field: Type the starting point in the LDAP tree from which the query will start searching for the full DN of the given user ID.
In the DN Attribute ID field: Type the name of the Distinguished Name attribute ID (for example distinguishedName, entrydn ...etc. This value is case sensitive).
Click Next to continue.