Global Settings

Active Directory Global Account

The active directory global account is designed as a simple way to set a master Active Directory user account for accessing all Microsoft data sources that require an Active Directory account for authentication. This setting has no impact on other parts of the application.

  • Provide the account ID in the format "domain \ username" together with the matching password.
  • When creating a Microsoft data source (OLAP, Tabular), select the Use global account settings checkbox to use the account credentials.

OAuth Settings

Global OAuth settings will be used in conjunction with those connections that rely on OAuth authentication and is designed as a simple way to set a shared application for accessing those data sources.

  • Redirect URL: A required URL for identity provider redirection. The field should be populated with the default page if there is no required user defined value.
    • Click Use Default Value to set the Redirect URL option to https://<PyramidServerName>/AuthenticateCallbackPage, where <PyramidServerName> is the name of the server you are currently logged in to.
  • JSON Web Keys URI: The location of the JSON Web Keys Set for the identity provider.
  • OAuth Token Endpoint: String used by Pyramid to get an access token or a refresh token.
  • OAuth Authentication Endpoint: String used by Pyramid to get an access token or a refresh token.

Note: When creating an SSO environment, you will be able to select Global Settings from the OAuth Settings drop-down on the Security card. This indicates that the Global credentials (defined here) will be used for all users. This applies for Amazon Athena, Amazon Redshift, Azure Synapse, and Snowflake.

NetBios

This option is to instruct the engine how to style the effective user name for Microsoft OLAP and Tabular connections. The default is "UPN" mode (user@domain.com). NetBios switches this to domain\user.

Kerberos Keytab Configuration File

A KRB5 configuration file is required to use Kerberos Keytab server-to-server authentication for Teradata and SAP HANA. It needs to be uploaded in this panel. For more details on using Keytabs click here.