Security migration in a business intelligence environment

A Security Migration System to enable access to a Business Intelligence Environment, the Security Migration System comprising:

• a memory comprising:
• a mapping, wherein the mapping comprises references to security principals from one or more External Security Sources along with local identifiers previously generated by a first Security Namespace;
• and
• an audit trail of access by the first user as the second user, and wherein the audit trail includes information related to at least one of when the requested access is allowed, when the requested access is attempted, or when the requested access is denied;
• and
• a Security Migration Namespace capable of:
• exposing one or more security principals from the mapping to allow access to the Business Intelligence Environment;
• retrieving the audit trail for presentation;
• and
• wherein the Security Migration System is distinct from one or more External Security Sources that define a plurality of security principals for the Business Intelligence Environment and distinct from the Business Intelligence Environment, and wherein the Security Migration Namespace is distinct from the first Security Namespace.

A method to manage access to a Business Intelligence Environment, the method comprising:

• receiving a request to access to a Business Intelligence Environment from a user;
• receiving user information associated with the user;
• determining that access to an External Security Source associated with authentication of the user is restricted and self-authenticating the user, via the Security Migration Namespace, by:
• determining whether to allow access to the Business Intelligence Environment based at least on the received user information;
• and
• if a determination is made to allow access to the Business Intelligence Environment, identifying a security principal associated with the received user information via previously generated local identifier, which is retrieved from a mapping stored in a memory coupled to the Security Migration Namespace, wherein the Security Migration Namespace is distinct from the External Security Source;
• and
• communicating with the Business Intelligence Environment to allow access based on the previously generated local identifier.

An article comprising non-transitory, machine-readable medium storing instructions to manage access to a Business Intelligence Environment, the instructions operable to cause data processing apparatus to perform operations comprising:

• receiving a request to access to a Business Intelligence Environment initiated by a user;
• receiving user information associated with the user;
• determining that access to an External Security Source associated with authentication of the user is restricted and self-authenticating the user, via the Security Migration Namespace, by:
• determining whether to allow access to the Business Intelligence Environment based at least on the received user information;
• and
• if a determination is made to allow access to the Business Intelligence Environment, identifying a security principal associated with the received user information via previously generated local identifier, which is retrieved from a mapping stored in a memory coupled to the Security Migration Namespace, wherein the Security Migration Namespace is distinct from the External Security Source;
• and
• communicating with the Business Intelligence Environment to allow access based on the previously generated local identifier.