Securing BIRT reports in Web App

TMehrens

<p>What is the recommended way to secure BIRT reports once they have been integrated with a web app?  My requirement is that application Users have Single Signon so they don't have to reenter logon information whenever they need to run a report.</p>
<p>Secondly how big an effort is this to deploy?</p>

Clement Wong

<p>Open Source BIRT provides no security, and you'll need to implement your own.</p>
<p> </p>
<p>Commercial BIRT (the Information Hub or iHub) provides security, scalability, and many more features that are not available in Open Source BIRT implementations.  More info @ <a data-ipb='nomediaparse' href='http://www.opentext.com/what-we-do/products/analytics/opentext-information-hub'>http://www.opentext.com/what-we-do/products/analytics/opentext-information-hub</a></p&gt;
<p> </p>
<p>You find previous discussions @ <a data-ipb='nomediaparse' href='http://stackoverflow.com/questions/16128051/how-to-secure-birt-report-viewer'>http://stackoverflow.com/questions/16128051/how-to-secure-birt-report-viewer</a>which included references to <a data-ipb='nomediaparse' href='http://www.avajava.com/tutorials/lessons/how-do-i-use-form-authentication-with-tomcat.html'>http://www.avajava.com/tutorials/lessons/how-do-i-use-form-authentication-with-tomcat.html</a&gt; and </p>
<p><a data-ipb='nomediaparse' href='https://balendra15.wordpress.com/2011/05/19/adding-security-to-birt-reports/'>https://balendra15.wordpress.com/2011/05/19/adding-security-to-birt-reports/</a>. </p>
<p> </p>
<p>Also, other write-ups include @ <a data-ipb='nomediaparse' href='https://notesfromheck.wordpress.com/2012/10/28/building-a-single-sign-on-module-for-the-birt-report-viewer-part-1/'>https://notesfromheck.wordpress.com/2012/10/28/building-a-single-sign-on-module-for-the-birt-report-viewer-part-1/</a></p&gt;
<p> </p>
<p>I've attached a comprehensive comparison of Open Source BIRT vs. Commercial BIRT versions for reference.</p>
<div> </div>