The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracles products remains at the sole discretion of Oracle.
Oracle BI Applications Integration with Transactional Systems (Oracle EBS, PeopleSoft, Siebel CRM)
Agenda Deployment Options EBS Flexfields Security Integration More Information
Deployment Options
Standalone Interactive Dashboards
BI in a Portal via JSR-168/WSRP
Presentation Services Go URL GO URL Reference a dashboard URL from an external web server http://server_name_or_ip_address/Analytics/saw. dll?Go&Path=/Shared/Service/ExecutiveOvervie w&NQUser=user1&NQPassword=rock
Refer to: Oracle Business Intelligence Presentation Services Administration Guide Incorporating Oracle Business Intelligence Results into External Portals or Applications Using the Go URL
BI Integrated with EBS
BI Embedded within PeopleSoft Portal
PSFT/OBI Integration Reference PSFT/OBI portal integration require Oracle SSO Customer Connections White Paper (published in July 2006 ) Building Oracle BI Enterprise Edition Dashboards for the Peoplesoft Enterprise Performance Management Warehouse
Embedded Directly in Siebel Applications Within a dashboard view
Embedded Directly in Siebel Applications Contextually within a transactional view
Embedded Directly in Siebel Applications Analytics results within a transactional applet
Profitability is calculated from Total Revenue and Costs (from Financial system) Cost To Serve is calculated from costs gathered from CTI systems, Service Systems, etc.
Embedded Directly in Siebel Applications
Within homepage applets (Using symbolic URL)
Embedded Directly in Siebel Applications
Within a screen tab Each Analytics dashboard is a separate view SSO Service Dashboard 1 View SSO Sales Dashboard 1 View
Action Links
Tight Integration with Oracle ApplicationsAction Links navigate from analytical to operational Action Links Seamless navigation from analytical information to transactional detail while maintaining context Works with Oracle EBS, Siebel CRM, PeopleSoft Enterprise
Action Link configuration for Oracle EBS Identify EBS Application page/function to link to Obtain function_id and parameters required by that page Identify EBS table that supports the parameters needed from above Create this physical table in the Oracle E-Business Suite OLTP schema as an opaque view Action Link is dynamically generated by calling the FND_RUN_FUNCTION.GET_RUN_FUNCTION_URL () function in the Oracle E-Business Suite OLTP Schema
Action Link Example: Drill to EBS Order Detail Identify EBS Application page/function to link to Order Detail page Obtain function_id and parameters required by that page Function ID - 'ISC_ORDINF_DETAILS_PMV' Parameters - (EBS_RESP_APPL_ID, EBS_RESP_ID, EBS_SEC_GROUP_ID)
Identify EBS table that supports the parameters needed from above EBS table: OE_ORDER_HEADERS_ALL;
Create this physical table in the Oracle E-Business Suite OLTP schema as an opaque view
Action Link Example: Drill to EBS Order DetailOpaque View Definition:SELECT HEADER_ID, fnd_run_function.get_run_function_url( CAST(fnd_function.get_function_id('ISC_ORDINF_DETAILS_PMV') AS NUMBER), CAST( VALUEOF(NQ_SESSION.OLTP_EBS_RESP_APPL_ID) AS NUMBER), CAST( VALUEOF(NQ_SESSION.OLTP_EBS_RESP_ID) AS NUMBER), CAST( VALUEOF(NQ_SESSION.OLTP_EBS_SEC_GROUP_ID) AS NUMBER), 'HeaderId='||HEADER_ID||'&pFunctionName=ISC_ORDINF_DETAILS_PMV&pM ode=NO&pageFunctionName=ISC_ORDINF_DETAILS_PMV', NULL) as ORDER_HEADER_ACTION_LINK_URL FROM OE_ORDER_HEADERS_ALL
Action Link Example: Drill to EBS Order Detail Join the opaque view with the warehouse table
Map Action Link URL in the opaque view to the presentation layer and change property to hyperlink.For Details Please Refer to Metalink3 Note: Enabling Action Links in Oracle Business Intelligence Applications for Oracle E-Business Suite (Doc ID 555254.1)
Action links between Analytics reports and Siebel CRM Direct navigation from record to transactional while maintaining context Java script in Siebel Analytics issues SWE command to navigate to given view and query for ROW_ID of record in given applet
Action Links Configuration for Siebel CRM
EBS Flexfields
Flexfield and Value Set Integration Key Flexfields (KFF) Pre-packaged mappings to extract Key Flexfield data Mappings are flexible to handle configuration performed on these flexfields Out-of-the-box support to a number of KFFs (refer next slide) Descriptive Flexfields (DFF) Support by extension of the data warehouse by adding requisite columns Value Set Hierarchy Extract hierarchical relationships of Value Sets
List of EBS Key Flexfields Supported OutOf-The-BoxEBS App/Module Supported Key Flexfield Segments*
Inventory
Item Categories** (MCAT)
1
Finance
Accounting (GL#)
1 through 30
Position (POS)
1
Human Resources
Job (JOB)
3,6
Grade (GRD)
1
*These are the segments supported Out-of-box. The number of segments covered can be extended on-site. Procedure documented in OBIA Apps Install and Config Guide ** 20 segments are supported for item category sets (hierarchies)
Security Integration
Oracle BI Apps Security IntegrationTight security integration with Oracle ApplicationsSales Service & Contact Center Marketing Procurement & Spend Supply Chain & Order Management Financials Human Resources
Oracle BI ApplicationsTightly integrated security model User Security Object Security Data Security
Oracle BI Foundation
Supports iPlanet, Novell, MSFT AD, Oracle Identity Directory (OID), and others Right content shown to the right user
User SecurityHow do I get in? Oracle BI EE Security Based Authentication Defines and stores user information in the RPD
User Security
LDAP Authentication Stores information from the LDAP server in session variables
External Table Authentication Maintains list of users in an external database
Database Authentication Authenticates users through database logins
Single Sign-On (SSO) Provides an open interface to enable web integration with SSO products
Example: External Table Authentication with Siebel CRM Applications
User Security
2 execute Authentication Init Block Web Browser
Oracle BI
user
1 log in 3 authenticate username and password
Siebel CRM Application DB Table S_USER
Example: Single Sign-On with Siebel CRM Applications2 integrate via symbolic URL infrastructure
User Security
3 establish connection using NQHOST parameter Web Browser
Siebel CRM4 drill back to Siebel CRM via Action Links
Oracle BI
user
1 log in once
Example: Single Sign-On with Oracle E-Business Suite Applications3 2 store ICX session cookie in browser navigate to
User Security
5 establish connection with Oracle EBS
Web Browser
Oracle EBS6 drill back to Oracle EBS via Action Links
Oracle BI
user
1 log in once
4 validate session via the ICX cookie
Object SecurityWhat parts of the application can you see? Business Logic Object SecurityPresentation Layer Semantic Object Layer Physical Layer
Object Security
Controls access to Subject Areas, Tables and Columns
Web Object SecurityLimits access to Dashboards, Reports and Web Folders
Query Blocking Specified combinations of columns in queries can be blocked from running and the user is notified of the illegal query
Object Security for Siebel CRM, EBS and PeopleSoftAssociated with Web Catalog Group: Order Management Manager
Object Security
Dashboards:Order Management Order Fulfillment
is assigned
Responsibility/Role : Order Management Manager
is associated with
User:
OM Manager
Subject Areas:Associated with Security Group:Order Management Manager
Sales - Order Lines Sales - Orders, Backlog and Invoices
Example: Role Identification with PeopleSoft
Object Security
PeopleSoft
2
fetches roles from PSROLEUSER via session init block1
log in
Oracle BIuser3
show objects based on matching object security group
Data Security for EBSWhat data can you see? Multi-Org data access support with Oracle E-Business Suite applications: Operating Unit Inventory Organization Business Group Company Org Ledger/ Set of Books Position
Data Security
Data Security for EBSExample: Responsibility and Inventory Org relationship in Oracle E-Business Suite
Data Security
assigned to user
Responsibility
associated with
Inventory Organization
Data Security for EBSExample: Inventory Org Based Security in Oracle BI
Data Security
Oracle E-Business Suite2
retrieve Inventory Orgs based on FND_USER tables1
log in
Oracle BIuser show data based on security group filters3
Data Security for Siebel CRMWhat data can you see?
Data Security
Data Security support with Siebel CRM Applications: Position Owner Organization
Data Security for Siebel CRMExample: Position Based Data Security
Data Security
Reports to (any level)User:Sales Manager
Primary Position
Owned by can view
Data Object:Account Opportunity
Data Security for Siebel CRMExample: Position Based SecurityETLOracle Business Analytics Warehouse
Data Security
Siebel CRM
2
retrieve position hierarchy from the warehouse1
log in
Oracle BIuser show data based on security group filters3
BI Apps 7.9.x - Position Hierarchy Change to position hierarchy with BI Apps 7.9.x W_POSITION_DH table enhancements
Data Security
A flattened hierarchy resulting in lesser number of table rows Stores more attributes at each level Populated through ETL to provide better query performance
W_POSITION_DH used for position based security
Employee Hierarchy Data SecurityFlattened Hierarchy- ExampleA15 JSMITH (VP of Sales)CURRENT T O P L V L2 L V L1 BA SE T O P AS WAS L V L2 L V L1 BA SE CUR_ FLG
Data Security
ROW_ WID
B8West RM
C3 East RMN-E DM
A
A
A
A
A
A
A
A
Y
1
A
B
B
B
A
B
B
B
Y
2
M17West Rep1
D6
E9East Rep1
A
B
M
M
A
B
M
M
Y
3
A
C
C
C
A
C
C
C
Y
4
N21N-E Rep1
A
C
D
D
A
C
D
D
Y
5
A
C
E
E
A
C
E
E
Y
6
Q1/2006
A
C
D
N
A
C
D
N
Y
7
Position Based Data SecurityW_POSITION_D Columns EMP_FST_NAME EMP_LAST_NAME EMP_LOGIN POSITION_NAME DIVN_NAME PAR_INTEGRATION_ID CURRENT_FLG EFFECTIVE_FROM_DT EFFECTIVE_TO_DT
Data Security
Position Based Data SecurityW_POSITION_DH 10 Levels of Hierarchy (easily extended to more) Following set of attributes at every level: EMPLOYEE_ID EMP_FULL_NAME EMP_LOGIN POSITION_ID POSITION_NAME DIVN_NAME
Data Security
SCD Type 2 for Position, Employee and Division Additional set of columns for As-Is / As-Was analysis
BI Apps 7.9.x - Position Based Security
Data Security
Uses W_POSITION_DH and metadata elements in repository (session variable, security group, etc) to implement security Restricts data visibility to primary owner of a record in this case, a Position and those above the owner in the hierarchy (see figure) Leverages OBIEE 10g capabilities (IndexCol function) Advantages over 7.8.x security model: POSITION_DH is a much smaller, flatter table than W_PARTY_LOGIN, thus queries run faster Richer functionality more attributes Current and historical hierarchies stores AS IS/AS WAS analysis possible Future 7.9.x release will implement team based security using same model upgrades easier
Further reference: Oracle BI Apps 7.9.x Install & Config Guide http://download.oracle.com/docs/cd/E10783_01/doc/bi.79/e10742.pdf
BI Apps 7.9.x - Position Based Security
Data Security
1. User logs in 2. User is authenticated based on log in credentials supplied 3. Session Variable called HIER_LEVEL is populated with the users hierarchy level obtained from W_POSITION_DH. Out of Box, HIER_LEVEL can be between 0 and 9 (10 levels). E.g., CEO has HIER_LEVEL = 9 (highest) 4. User is assigned to BI Apps security group that has same name as users Siebel OLTP responsibility 5. User also assigned to BI Apps specific security group called Primary Employee/Position Hierarchy-based Security that intelligently applies filters based on users hierarchy level (HIER_LEVEL) to queries on the logical tables to fetch data
BI Apps 7.9.x - Position Based Security
Data Security
Uses W_POSITION_DH and metadata elements in repository (session variable, security group, etc) to implement security Restricts data visibility to primary owner of a record in this case, a Position and those above the owner in the hierarchy (see figure) Leverages OBIEE 10g capabilities (IndexCol function) Advantages over 7.8.x security model: POSITION_DH is a much smaller, flatter table than W_PARTY_LOGIN, thus queries run faster Richer functionality more attributes Current and historical hierarchies stores AS IS/AS WAS analysis possible Future 7.9.x release will implement team based security using same model upgrades easier
Further reference: Oracle BI Apps 7.9.x Install & Config Guide http://download.oracle.com/docs/cd/E10783_01/doc/bi.79/e10742.pdf
Data Security for Siebel CRMExample: Owner Based Security
Data Security
is assigned
Login:AFRANKS
User:
ERM Analytics Helpdesk Agent
(is stamped on Data Object) can view
Data Object:Service Request Response Activity
Data Security for Siebel CRMExample: Owner Based Security
Data Security
Siebel CRM
2
fetches Owner ID via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for Siebel CRMExample: Organization Based Security
Data Security
is assigned
Organization:North America WEST
User:
Partner Executive Analytics User
(is stamped on Data Object) can view
Data Object:Customer Opportunity Contact
Data Security for Siebel CRMExample: Organization Based Security
Data Security
Siebel CRM
2
fetches Organization(s) via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for PeopleSoftWhat data can you see? Data Security support with PeopleSoft Applications: Set ID Company Org Operating Unit HR Business Unit Payables Business Unit Receivables Business Unit Position Ledger/ Set of Books
Data Security
Data Security for PeopleSoftExample: Operating Unit Based Security
Data Security
PeopleSoft
2
fetches Operating Unit Organization (s) via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for PeopleSoftExample: Company Based Security
Data Security
PeopleSoft
2
fetches Company (s) via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for PeopleSoftExample: Payables Based Security
Data Security
PeopleSoft
2
fetches Payables Business Unit (s) via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for PeopleSoftExample: Receivables Based Security
Data Security
PeopleSoft
2
fetches Receivables Business Unit (s) via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for PeopleSoftExample: Set ID Based Security
Data Security
PeopleSoft
2
fetches Set ID (s) via session init block1
log in
Oracle BIuser show data based on security group filters3
Data Security for PeopleSoftExample: HR Business Unit Based Security
Data Security
Managed by
HR Organization
User:
HR Analyst
can view
Owned by
Data Object:HR Data
Organization Based Data SecurityRegular Employee Data Visibility We extract employee-manager relationships fromPS_JOB
Data Security
A regular employee can only see his data and his subordinates data
Organization Based Data SecurityHR Analyst Data Visibility An HR analyst can see all HR data for an Organization he or she is managing
Data Security
Organization Based Data SecurityHR Analyst Data Visibility Within his own Organization, an HR analyst can only see his subordinates HR data
Data Security
HR Manager Security GroupHR Org_based Security Group
3Data Security
Primary Employee/Position Hierarchy Security
More Information
More InformationTopic: Portal integration via JSR-168/WSRP Guide: Oracle Business Intelligence Enterprise Edition Online Documentation Library 10.1.3.3.3 (http://www.oracle.com/technology/documentation/bi_ee.html) Presentation Services Administration Guide - Chapter 11: Integrating Oracle BI Presentation Services into Corporate Environments Using HTTP
More InformationTopics: Oracle BI EE Security Based Authentication, LDAP Authentication, External Table Authentication, Database Authentication Guide: Oracle Business Intelligence Enterprise Edition Online Documentation Library 10.1.3.3.3 (http://www.oracle.com/technology/documentation/bi_ee.html) Deployment Guide, Chapter 7: Oracle Business Intelligence Authentication Mechanisms Server Administration Guide - Chapter 15: Security in Oracle BI
More InformationTopic: Single Sign-On (SSO) Guide: Oracle Business Intelligence Enterprise Edition Online Documentation Library 10.1.3.3.3 (http://www.oracle.com/technology/documentation/bi_ee.html) Deployment Guide Chapter 8: Implementing Single Sign-On Products With Oracle Business Intelligence Chapter 10: Integrating Oracle Internet Directory With Oracle Business Intelligence Chapter 11: Enabling Oracle Single Sign-On for Oracle Business Intelligence
More InformationTopics: Business Logic Object Security, Web Object Security, Query Blocking Guide: Oracle Business Intelligence Enterprise Edition Online Documentation Library 10.1.3.3.3 (http://www.oracle.com/technology/documentation/bi_ee.html) Server Administration Guide - Chapter 15: Security in Oracle BI Presentation Services Administration Guide - Chapter 3: Administering Oracle BI Answers - Blocking Requests in Answers
More InformationTopic: Flexfield Integration Guide: Oracle Business Intelligence Applications Online Documentation Library 7.9.5 (http://www.oracle.com/technology/documentation/bi_apps.html) Installation and Configuration Guide Chapter 5: Customizing the Oracle Business Analytics Warehouse Chapter 7.1.1.6: Configuring General Ledger Account Hierarchies Using General Ledger Accounting Flexfield value sets definitions Chapter 11.2.2.19: About Configuring Key Flexfields
More InformationTopic: Value Set Hierarchy Integration Guide: Oracle Business Intelligence Applications Online Documentation Library 7.9.5 (http://www.oracle.com/technology/documentation/bi_apps.html) Installation and Configuration Guide Chapter 9: Configuring Oracle Financial Analytics
More InformationTopic: Implementing Security for BI Apps Guide: Oracle Business Intelligence Applications Online Documentation Library 7.9.5 (http://www.oracle.com/technology/documentation/bi_apps.html) Installation and Configuration Guide Chapter 6: Integrated Security for Oracle Business Intelligence Applications
More InformationTopic: Action Link Demo Enabling Action Links in Oracle Business Intelligence Applications for Oracle E-Business Suite (Doc ID 555254.1) https://metalink3.oracle.com/od/faces/secure/km/DocumentDisplay.jspx?id=555254.1
Look under Sales Demos in BI Applications Portal: http://ias.us.oracle.com/portal/page?_pageid=33,1667991&_dad=portal&_schema=PORTAL