In WebFOCUS 7 and prior we had a few reports that were accessible via direct web link from in-house web-based systems. These systems created a web link that included the Explicit Signon using the IBIMR_action=MR_SIGNON and included the credentials for signon in the URL. This was an internal-only system - not a recommended practice for obvious security reasons. This was used to display BI reports related to the data the users were looking at on the in-house system without having them log into BI.

An example would be where my Requisition system allows a user to run an WebFOCUS accounting report displaying GL Balances for a department & account from an expense requisition displayed within the Requisition system. The WebFOCUS report is displayed in a popup window. The user has no idea this is coming from the BI reporting system since s/he hasn't had to log into a WebFOCUS account.

I can't find where the Explicit Signon is available from WebFOCUS anymore, so I assume it is replaced with a better, more secure approach. The only approach obvious to me would be to utilize the "Public" application to duplicate these report procedures, or grant "Everyone" access specifically to these few reports.

Now that you are using version 8 of WebFOCUS - we are on 8.1.0.4 - what method is your team using for internal web-based (not WebFOCUS) systems/applications to invoke/display a BI report from your WebFOCUS server with specified parameters in a browser window when the user will not have a signon into your WebFOCUS system?

This message has been edited. Last edited by: <Emily McAllister>,

In WF 7.x we used Managed Reporting Explicit Sign-on Processing as well.

For 8.0.07, we worked with our IB Tech Rep, and determined that in WF 8 the RESTful Web Server Request 'IBIRS_action=signOn', replaces the WF Servlet Request 'IBIMR_action=MR_SIGNON', for the Explicit Sign-On.

A RESTFul request looks similar to the WF MR servlet request. Something like:

http://myserver/ibi_apps/rs/ibfs?IBIRS_action=signOn&IBIRS_userName=MYUSERNAME&IBIRS_password=&IBIMR_random=51325

Check out the documentation of RESTful Web Services, there is a lot.

Also a test page can be enabled as well.