Strategically Distributing and Deploying Oracle BI Mobile in the

EnterpriseJune 26, 2013 | 3pm

KScope2013 | Session #15Christian Screen

Session Abstract

The Oracle BI Mobile iPad application is based on a public distribution system via the Apple App Store. Its ability to connect to an organization's non-externalized Oracle BI server typically requires a VPN connection to be opened on the tablet device before leveraging the OBIEE mobile application. There are tremendous security concerns surrounding opening VPN access to other applications downloaded to the device. This session covers the latest Mobile Security kit released by Oracle and provides a high to mid-level overview of how implementing containerization and an internal application deployment strategy can help achieve ubiquitous mobile deployment and any organization. By the end of this presentation attendees should understand a basic strategy for successfully deploying mobile Oracle BI while adhering to security standards.

2

Christian Screen

Oracle ACE Oracle BI 11g Specialist Oracle Deputy CTO & EPM/BI Counselor Hyperion Essbase Certified Consultant Co-Author of First Oracle BI 11g Book 13+ Years in BI/Data Warehousing Open Source Software Contributor Contributor at ArtOfBI.com BI Practice Lead at Analytic Vision

@artofbi

3

Analytic Vision Introduction

Analytic Vision is a Management Consulting Firm specializing in the implementation of Oracle’s Enterprise Performance Management and Business Intelligence Products Oracle’s EPM Suite | Hyperion Financial Management | Hyperion Planning |

Hyperion Strategic Finance | Essbase Analytics Oracle Business Intelligence Enterprise Edition (OBIEE) | Integration with

Essbase Analytics and Oracle EPM products OBIA pre-built applications over Oracle EBS, PeopleSoft, and JDE Data Warehouse design and development to fully support total solutions

Founded in 2001, currently a team of 50 consultants Headquartered in Charlotte, NC Extensive business experience across many verticals:

Financial Services, Manufacturing, Distribution, Retail, Health Sciences, Communications, Healthcare and Property Management

Oracle Platinum Partner

4AnalyticVision.com

Agenda

Overview of Mobile BI BYOD vs. Corporate Devices The Challenge with Mobile Policies Challenges with Mobile BI

Working with Oracle BI Mobile Deployment Scenarios Getting Oracle Mobile BI Mobile Device Management (MDM) Software and Concepts Distributing Deploying Summary

5

Level of Session

Coverage of basic vocabulary Deployment Strategy Drivers for Decision Making Non-Sales Pitch Dialog

6

Sweet SpotBeginner Advanced

Overview of Mobile BI

7

Just a Quick Mention of OBIEE

Oracle’s go-forward Dashboard/Reporting Solution

Overview of Mobility and BI

9

BYOD vs. Corporate Devices

Bring Your Own Device Not Bring Your Own Disaster; Bring your device of choice

Costs go down, worker productivity goes up * Reduces Redundancy of Devices Not built for the Enterprise or its Stringent Security Requirements So, Why not just have Corporate Devices in the first place?

Before the iPhone, Who competed with RIM Blackberry?

10

BYOD($) Company Issued ($)

*http://www.infoworld.com/d/consumerization-of-it/afraid-of-byod-intel-shows-better-way-204123

The Challenge with Mobility Policies

Only 44% of the Enterprise has a policy 62% predicted by end of 2013 61% of the 44% >= 1 Year Established Policy

11

* Based on TechRepublic and ZDNet Survey Resultshttp://www.zdnet.com/unavoidable-62-percent-of-companies-to-allow-byod-by-years-end-7000010703/

The Challenge with Mobility Policies

MDM policy is usually Enterprise –wide not specific to a single app Idea of BYOD policy is novel Managing BYOD policy (MDM) is a full-time job in an enterprise Additional costs associated with a MDM Solution IT gives up a bit of control. Users aren’t sure if this is real power. Creating a clear policy for both corporate and employee owned

devices Too many types of devices What data to wipe and when? Service costs to employees when required to access company info

on their mobile device Example: non Wi-Fi access on user’s limited wireless plan However, stipends are saving companies ~ 25%

12

Challenges with Mobile BI

It is a single mobile application It can be accessed via the tablet browser but also a mobile app Developing reports for mobile first doesn’t always make sense How do you provide access to individuals that work with you not

necessarily for you. Is your BI program an enterprise-wide initiative?

Are there field users and CXO users? What’s the total user count? How many users should have mobile access? Yes, surface your Hyperion Planning, HFM, and Essbase data and metadata

Oracle BI is ready right now for Enterprise Mobility, MDM, etc. How can we drive policy for this single application? Is access to BI data required outside of the firewall – in the field?

13

We’ve Moved Beyond Simple Communication

We are in the “Post-Blackberry” Era

14

Working with Oracle BI Mobile Deployment Scenarios

15

Oracle BI Mobile on the iPad

Android and Blackberry options Not Available as of 6/2013

16

Preparing to Plan is Planning to Fail

BI Teams and IT Administration Teams must Collaborate

What’s the Goal for Your Oracle Mobile BI?

18

OBIEE

Medical Vendor

Sales Person

Inside Building Network

Yes, Hyperion Applications /Data is surfaced via Oracle BI Mobile

Let’s Talk Mobile BI Distribution Scenarios

Three viable scenarios for Distributing Oracle Mobile BI: Scenario A

Default OOTB Oracle BI Mobile Open to internal network only

Scenario B Open to VPN Users Extension of Scenario A

Scenario C Mobile Device Management MDM Center of Excellence

C

A

B

Mai

nten

ance

Security

Waiting my iPad to Come

iTunes download is free App is ready to go once installed on device

It’s free to download but there is a license costs if not on the Oracle BI Foundation Suite

Why Only for the iPad?

Oracle tends to follow the 80/20 rule when developing

21

Graph Courtesy of http://www.citeworld.com/development/20635/enterprise-app-stores-common-finds-appcentral

Let’s Talk Scenarios – Scenario A

Scenario A – Out of the Box Option1. Get iPad (i.e.: BYOD)2. Download Oracle BI Mobile App from iTunes Apps Store3. Connect to OBIEE Server with standard security or SSO4. Enjoy Analytics:

Within the confines of the Building Wi-Fi

Usual Discussions Inability to manage application versions Inability to wipe device data, etc. No Corporate Customizations Users may alternatively use the tablet’s web browser Users are limited to Internal Network (Wi-Fi)

Let’s Talk Scenarios – Scenario A

Scenario A – Potential Solution for Access and Security A High Availability Oracle BI 11g Environment implies SSL and Infrastructure.

Web Tier

App Tier

Web Tier

App Tier

Load Balancer

NASFMW Home

Firewall

Let’s Talk Scenarios – Scenario B

Scenario B – The VPN Option Same as and provides same approach Scenario A Use VPN capabilities to users (Often combined with Single Sign-on) Enjoy Analytics:

Within the confines of your Company’s VPN Tunnel Outside of the Company firewall

Usual Discussions Same as and provides same approach Scenario A Leverage existing VPN Technology investment already probably implemented Our vendors/customers are not on our network and need to see dashboards Allows external firewalled entry into network (the entire Network!) How many times will I have to log in?

Let’s Talk Scenarios – Scenario B Setting up VPN on iOS Device

Same as on iPhone as iPad

Let’s Talk Scenarios – Scenario C

Scenario C1. Get iPad (i.e.: BYOD)2. Application Developers get Mac OS, Xcode, Apple Developer Account, Oracle

BI Mobile security toolkit3. Company leverages an MDM Solution or Internal Enterprise App Store4. Download OBIEE from corporate app store/repository5. Enjoy Analytics within the confines of your Company’s Mobile Policy

Usual Discussions Is this an IT purchase decision or can it be departmental? Do we need an MDM Solution? How is security controlled? Can we wipe the device’s data or remove an app administratively? So, the Oracle BI Mobile Security Toolkit Doesn’t Give Us This!

Scenario C - Enterprise App Store

What Could We Do if We Just Understood How it all Works!

27

Photo Courtesy of http://www.enterpriseappzone.com/enterprise-app-store/

Oracle BI Native Security

28

Native Privileges/Authorization

Administration Page Privilege Options

Scenario B & C May Use Single Sign-On

Single Sign-On requires first being authenticated via network Provides a means for integrated security with Mobile App Still Requires Configuration on Oracle BI implementation

30

Getting Oracle BI Mobile for the Enterprise

Getting Oracle BI Mobile Bundle

Download the kit which contains a bundle file

32

http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/downloads/bi-mobile-security-toolkit-1872818.html

Getting Oracle BI Mobile Bundle

Requires Xcode Requires a Mac OS

33

https://developer.apple.com/xcode/

Working with Apple

Apple Developer Program Account Required

34

https://developer.apple.com/membercenter/

Oracle BI Mobile Security Kit Content

Deployment is Process Driven Customizations are few but there is some control

35

1

2

3

Deploying Oracle Mobile BI

BYOD users have applications in “Containers” Containers open a secure tunnel to the network (i.e.: behind the

firewall) for all corporate MDM Apps

36

Deploying Oracle BI Mobile

37

Just Give Me My Dashboard on the iPad

VPN is proven and “always” works, even on the iPad Who complex is VPN access to manage vs. a standardized MDM Policy

Complete and prevailing control requires MDM Visually there will be differences; There should be!

38

Mobile Device Management Software and Concepts

39

Mobile Device Management Providers

Lots of Providers Of course, there is a cost. It’s an Technology Management Tool Most major vendors have a tool but niche mobile companies have

focused advantages

40

Distributing Oracle Mobile BI

VPN Scenario BYOD Download the latest Oracle BI Mobile HD App Use VPN to connect to network via App on iPad Access via Mobile App or Web Browser Again, it does not provide the means to wipe a device’s data or app

Internal Network or Public DNS Scenario BYOD Download the latest Oracle BI Mobile HD App Use on-site Wi-Fi to connect to guest network or DMZ via App on iPad Access via Mobile App or Web Browser

41

Distributing Oracle Mobile BI

Distribute on Internal or 3rd Party App Stores BYOD or Corporate Issue Compile Custom Logic via OBI Mobile Security Tool Kit Distribute via App store of choice Download the latest Oracle BI Mobile App from MDM Corporate App Store

MDM Scenario BYOD or Corporate Issue Compile Custom Logic via OBI Mobile Security Tool Kit Distribute via the MDM solution App store Download the latest Oracle BI Mobile App from MDM Corporate App Store

42

Summary

BYOD is happening, so don’t get left behind Push for mobile now as a user and more granularity as network

security Deploy Oracle BI mobile in test groups with buy-in from CXO-level Develop a strategy for mobile BI.

Think Location Intelligence not just maps an tables Design for mobile for mobile users – not one size fits all It’s okay to start with VPN Prepare to skill-up your teams for mobile

43

Reference

http://www.zdnet.com/topic-byod-and-the-consumerization-of-it/ http://www.air-watch.com/solutions http://bitzermobile.com/beam-bitzer-enterprise-application-mobility/ http://www.mobileiron.com/ http://www.sophos.com/en-us/products/mobile.aspx http://www.forbes.com/sites/tomkemp/2013/02/19/as-mobile-device-management-beco

mes-commoditized-whats-next-for-mdm/ http://public.dhe.ibm.com/common/ssi/ecm/en/azw03001usen/AZW03001USEN.PDF http://www.techrepublic.com/blog/project-management/learn-byod-policy-best-practices

-from-templates/5605 http://www.cio.com/article/690281/Managing_Mobile_Devices_10_Lessons_Learned_via

_Forrester http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/oracle-bi-security-

toolkit-faq-1904307.pdf http://docs.oracle.com/cd/E28280_01/bi.1111/e25318/getstarted.htm#CHDGEEAJ https://support.oracle.com/epmos/faces/ui/km/DocumentDisplay.jspx?_afrLoop=4222121

44633512&id=1293391.1

44

Questions?

Christian Screen, Oracle BI Practice LeadAnalytic Vision(704) 909-2301

cscreen@analyticvision.com