KB239102: How to view the HTTP Headers passed from a trusted provider to MicroStrategy Web 9.4.1- 10.x

SUMMARY:
Strategy Web 9.4.1-10.x Administrators can delegate the authentication to third party trusted providers, such as Tivoli, Siteminder, or even Ping Federate (starting in Strategy Web 9.4.1 HF 7).
This means that the authentication into the Strategy Web environment is now handled by the 3rd party trusted server and not by Strategy. Under this scenario, once the user has successfully authenticated through the trusted server, the trusted provider is in charge of passing the Single Sign On (SSO) user parameters to Strategy Web in the form of HTTP headers.
Strategy Web will then inspect the HTTP headers to look for the name and content in order to successfully create a session with the Strategy Intelligence Server.
The name of the variable expected by Strategy Web will vary according to the "Trusted Provider" being used. In some cases, where trusted authentication is failing, it is necessary to show the HTTP headers passed to the Strategy Web application to ensure the correct name is being used. If the variable is not being passed in the headers, or if the name does not match the expected name, the session creation will fail. Follow the steps below to set up a page that will trace the headers sent to the Strategy Web server.
Note: Strategy Technical Support is not responsible for the configuration of any of the trusted providers. If it is found that the variable is not included in the headers or is incorrectly labeled, follow up with the trusted provider administrator for further assistance.
Display the HTTP Headers in Strategy Web 9.4.1 ASP
Strategy Web 9.4.1 ASP can make use of ASPx pages to capture and print the HTTP headers currently sent by the Trusted Provider. Follow these steps to set up IIS to trace HTTP headers:

1. Download the file included in this article called "httpHeadersASP.zip"
2. Decompress and place the file "httpHeaders2.aspx" in the following location in the Internet Information Services (IIS) machine:
    
   

   
   C:\Program Files (x86)\MicroStrategy\Web ASPx\asp\httpHeaders2.aspx

   
   
3. In order to show the HTTP headers passed to Strategy Web by a Trusted Provider, access this file through the provider itself. For example, enter a URL similar to the one below in a browser:
    
   

   
   http://mywebserver.com/MicroStrategy/asp/httpheaders2.aspx

   
   where /Strategy is a protected resource on mywebserver.com.
   Note: In some environments the Strategy application might have been renamed.

Display the HTTP Headers in Strategy Web 9.4.1 J2EE
Strategy Web 9.4.1 J2EE can make use of JSP pages to capture and print the HTTP headers currently sent by the Trusted Provider. Follow these steps to set up the J2EE Web Application Server to trace HTTP headers:

1. Download the file included in this article called "httpHeadersJ2EE.zip"
2. Decompress and place the file "httpHeaders.jsp" in the following location in the Web Server machine:
    
   

   
   ...\webapps\MicroStrategy\images\httpHeaders.jsp

   
   
3. In order to show the HTTP headers passed to Strategy Web by a Trusted Provider, access this file through the provider itself. For example, enter a URL similar to the one below in a browser:
    
   

   
   http://mywebserver.com:8080/MicroStrategy/images/httpheaders.jsp

   
   where /Strategy is a protected resource on mywebserver.com.
   Note: In some environments the Strategy application might have been renamed

THIRD PARTY SOFTWARE INSTALLATION WARNING:
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability.