Deploying Oracle BI Mobility in the Enterprise

Report
Strategically Distributing and
Deploying Oracle BI Mobile in the
Enterprise
June 26, 2013 | 3pm
KScope2013 | Session #15
Christian Screen
Session Abstract
The Oracle BI Mobile iPad application is based on a public distribution system via
the Apple App Store. Its ability to connect to an organization's non-externalized
Oracle BI server typically requires a VPN connection to be opened on the tablet
device before leveraging the OBIEE mobile application. There are tremendous
security concerns surrounding opening VPN access to other applications
downloaded to the device. This session covers the latest Mobile Security kit
released by Oracle and provides a high to mid-level overview of how
implementing containerization and an internal application deployment strategy
can help achieve ubiquitous mobile deployment and any organization. By the end
of this presentation attendees should understand a basic strategy for successfully
deploying mobile Oracle BI while adhering to security standards.
2
Christian Screen
 Oracle
ACE
 Oracle BI 11g Specialist
 Oracle Deputy CTO & EPM/BI Counselor
 Hyperion Essbase Certified Consultant
 Co-Author of First Oracle BI 11g Book
 13+ Years in BI/Data Warehousing
 Open Source Software Contributor
 Contributor at ArtOfBI.com
 BI Practice Lead at Analytic Vision
@artofbi
3
Analytic Vision Introduction





Analytic Vision is a Management Consulting Firm specializing in the
implementation of Oracle’s Enterprise Performance Management and Business
Intelligence Products
 Oracle’s EPM Suite | Hyperion Financial Management | Hyperion Planning |
Hyperion Strategic Finance | Essbase Analytics
 Oracle Business Intelligence Enterprise Edition (OBIEE) | Integration with
Essbase Analytics and Oracle EPM products
 OBIA pre-built applications over Oracle EBS, PeopleSoft, and JDE
 Data Warehouse design and development to fully support total solutions
Founded in 2001, currently a team of 50 consultants
Headquartered in Charlotte, NC
Extensive business experience across many verticals:
 Financial Services, Manufacturing, Distribution, Retail, Health Sciences,
Communications, Healthcare and Property Management
Oracle Platinum Partner
AnalyticVision.com
4
Agenda
 Overview
of Mobile BI
 BYOD vs. Corporate Devices
 The Challenge with Mobile Policies
 Challenges with Mobile BI
 Working
with Oracle BI Mobile Deployment Scenarios
 Getting Oracle Mobile BI
 Mobile Device Management (MDM) Software and Concepts
 Distributing
 Deploying
 Summary
5
Level of Session
 Coverage
of basic vocabulary
 Deployment Strategy
 Drivers for Decision Making
 Non-Sales Pitch Dialog
Beginner
Sweet Spot
6
Advanced
Overview of Mobile BI
7
Just a Quick Mention of OBIEE
 Oracle’s
go-forward Dashboard/Reporting Solution
Overview of Mobility and BI
9
BYOD vs. Corporate Devices
 Bring
Your Own Device
 Not Bring Your Own Disaster; Bring your device of choice
 Costs
go down, worker productivity goes up *
 Reduces Redundancy of Devices
 Not built for the Enterprise or its Stringent Security Requirements
 So, Why not just have Corporate Devices in the first place?
 Before the iPhone, Who competed with RIM Blackberry?
*http://www.infoworld.com/d/consumerization-of-it/afraid-of-byod-intel-shows-better-way-204123
10
The Challenge with Mobility Policies
 Only
44% of the Enterprise has a policy
 62% predicted by end of 2013
 61% of the 44% >= 1 Year Established Policy
* Based on TechRepublic and ZDNet Survey Results
http://www.zdnet.com/unavoidable-62-percent-of-companies-to-allow-byod-by-years-end-7000010703/
11
The Challenge with Mobility Policies
 MDM
policy is usually Enterprise –wide not specific to a single app
 Idea of BYOD policy is novel
 Managing BYOD policy (MDM) is a full-time job in an enterprise
 Additional costs associated with a MDM Solution
 IT gives up a bit of control. Users aren’t sure if this is real power.
 Creating a clear policy for both corporate and employee owned
devices
 Too many types of devices
 What data to wipe and when?
 Service costs to employees when required to access company info
on their mobile device
 Example: non Wi-Fi access on user’s limited wireless plan
 However, stipends are saving companies ~ 25%
12
Challenges with Mobile BI
 It
is a single mobile application
 It can be accessed via the tablet browser but also a mobile app
 Developing reports for mobile first doesn’t always make sense
 How do you provide access to individuals that work with you not
necessarily for you.
 Is your BI program an enterprise-wide initiative?
 Are there field users and CXO users? What’s the total user count?
 How many users should have mobile access?
 Yes, surface your Hyperion Planning, HFM, and Essbase data and metadata
 Oracle
BI is ready right now for Enterprise Mobility, MDM, etc.
 How can we drive policy for this single application?
 Is access to BI data required outside of the firewall – in the field?
13
We’ve Moved Beyond Simple Communication
 We
are in the “Post-Blackberry” Era
14
Working with Oracle BI Mobile
Deployment Scenarios
15
Oracle BI Mobile on the iPad
 Android
and Blackberry options Not Available as of 6/2013
16
Preparing to Plan is Planning to Fail
 BI
Teams and IT Administration Teams must Collaborate
What’s the Goal for Your Oracle Mobile BI?
Inside
Building
Network
Medical
Vendor
Yes, Hyperion Applications
/Data is surfaced via Oracle BI
Mobile
OBIEE
Sales Person
18
Let’s Talk Mobile BI Distribution Scenarios
 Three
viable scenarios for Distributing Oracle Mobile BI:
 Scenario A
 Default OOTB Oracle BI Mobile
 Open to internal network only
 Scenario C
 Mobile Device Management
 MDM Center of Excellence
C
Maintenance
 Scenario B
 Open to VPN Users
 Extension of Scenario A
B
A
Security
Waiting my iPad to Come
 iTunes
download is free
 App is ready to go once installed on device
It’s free to download but
there is a license costs if
not on the Oracle BI
Foundation Suite
Why Only for the iPad?
 Oracle
tends to follow the 80/20 rule when developing
Graph Courtesy of http://www.citeworld.com/development/20635/enterprise-app-stores-common-finds-appcentral
21
Let’s Talk Scenarios – Scenario A
 Scenario
A – Out of the Box Option
Get iPad (i.e.: BYOD)
Download Oracle BI Mobile App from iTunes Apps Store
Connect to OBIEE Server with standard security or SSO
Enjoy Analytics:
1.
2.
3.
4.
Within the confines of the Building Wi-Fi

 Usual





Discussions
Inability to manage application versions
Inability to wipe device data, etc.
No Corporate Customizations
Users may alternatively use the tablet’s web browser
Users are limited to Internal Network (Wi-Fi)
Let’s Talk Scenarios – Scenario A
 Scenario
A – Potential Solution for Access and Security
 A High Availability Oracle BI 11g Environment implies SSL and Infrastructure.
Load Balancer
Firewall
Web Tier
Web Tier
App Tier
App Tier
FMW
Home
NAS
Let’s Talk Scenarios – Scenario B
 Scenario
B – The VPN Option
 Same as and provides same approach Scenario A
 Use VPN capabilities to users (Often combined with Single Sign-on)
 Enjoy Analytics:
 Within the confines of your Company’s VPN Tunnel
 Outside of the Company firewall
 Usual
Discussions
 Same as and provides same approach Scenario A
 Leverage existing VPN Technology investment already probably implemented
 Our vendors/customers are not on our network and need to see dashboards
 Allows external firewalled entry into network (the entire Network!)
 How many times will I have to log in?
Let’s Talk Scenarios – Scenario B
 Setting
up VPN on iOS Device
 Same as on iPhone as iPad
Let’s Talk Scenarios – Scenario C
 Scenario
1.
2.
3.
4.
5.
C
Get iPad (i.e.: BYOD)
Application Developers get Mac OS, Xcode, Apple Developer Account, Oracle
BI Mobile security toolkit
Company leverages an MDM Solution or Internal Enterprise App Store
Download OBIEE from corporate app store/repository
Enjoy Analytics within the confines of your Company’s Mobile Policy
 Usual
Discussions
 Is this an IT purchase decision or can it be departmental?
 Do we need an MDM Solution?
 How is security controlled?
 Can we wipe the device’s data or remove an app administratively?
 So, the Oracle BI Mobile Security Toolkit Doesn’t Give Us This!
Scenario C - Enterprise App Store
 What
Could We Do if We Just Understood How it all Works!
Photo Courtesy of http://www.enterpriseappzone.com/enterprise-app-store/
27
Oracle BI Native Security
28
Native Privileges/Authorization
 Administration
Page Privilege Options
Scenario B & C May Use Single Sign-On
 Single
Sign-On requires first being authenticated via network
 Provides a means for integrated security with Mobile App
 Still Requires Configuration on Oracle BI implementation
30
Getting Oracle BI Mobile for the
Enterprise
Getting Oracle BI Mobile Bundle
 Download
the kit which contains a bundle file
http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/downloads/bi-mobile-security-toolkit-1872818.html
32
Getting Oracle BI Mobile Bundle
 Requires
Xcode
 Requires a Mac OS
https://developer.apple.com/xcode/
33
Working with Apple
 Apple
Developer Program Account Required
https://developer.apple.com/membercenter/
34
Oracle BI Mobile Security Kit Content
 Deployment
is Process Driven
 Customizations are few but there is some control
3
1
2
35
Deploying Oracle Mobile BI
 BYOD
users have applications in “Containers”
 Containers open a secure tunnel to the network (i.e.: behind the
firewall) for all corporate MDM Apps
36
Deploying Oracle BI Mobile
37
Just Give Me My Dashboard on the iPad
 VPN
is proven and “always” works, even on the iPad
 Who complex is VPN access to manage vs. a standardized MDM Policy
 Complete
and prevailing control requires MDM
 Visually there will be differences; There should be!
38
Mobile Device Management
Software and Concepts
39
Mobile Device Management Providers
 Lots
of Providers
 Of course, there is a cost. It’s an Technology Management Tool
 Most major vendors have a tool but niche mobile companies have
focused advantages
40
Distributing Oracle Mobile BI
 VPN
Scenario
 BYOD
 Download the latest Oracle BI Mobile HD App
 Use VPN to connect to network via App on iPad
 Access via Mobile App or Web Browser
 Again, it does not provide the means to wipe a device’s data or app
 Internal
Network or Public DNS Scenario
 BYOD
 Download the latest Oracle BI Mobile HD App
 Use on-site Wi-Fi to connect to guest network or DMZ via App on iPad
 Access via Mobile App or Web Browser
41
Distributing Oracle Mobile BI
 Distribute
on Internal or 3rd Party App Stores
 BYOD or Corporate Issue
 Compile Custom Logic via OBI Mobile Security Tool Kit
 Distribute via App store of choice
 Download the latest Oracle BI Mobile App from MDM Corporate App Store
 MDM
Scenario
 BYOD or Corporate Issue
 Compile Custom Logic via OBI Mobile Security Tool Kit
 Distribute via the MDM solution App store
 Download the latest Oracle BI Mobile App from MDM Corporate App Store
42
Summary
 BYOD
is happening, so don’t get left behind
 Push for mobile now as a user and more granularity as network
security
 Deploy Oracle BI mobile in test groups with buy-in from CXO-level
 Develop a strategy for mobile BI.
 Think Location Intelligence not just maps an tables
 Design
for mobile for mobile users – not one size fits all
 It’s okay to start with VPN
 Prepare to skill-up your teams for mobile
43
Reference












http://www.zdnet.com/topic-byod-and-the-consumerization-of-it/
http://www.air-watch.com/solutions
http://bitzermobile.com/beam-bitzer-enterprise-application-mobility/
http://www.mobileiron.com/
http://www.sophos.com/en-us/products/mobile.aspx
http://www.forbes.com/sites/tomkemp/2013/02/19/as-mobile-device-managementbecomes-commoditized-whats-next-for-mdm/
http://public.dhe.ibm.com/common/ssi/ecm/en/azw03001usen/AZW03001USEN.PDF
http://www.techrepublic.com/blog/project-management/learn-byod-policy-bestpractices-from-templates/5605
http://www.cio.com/article/690281/Managing_Mobile_Devices_10_Lessons_Learned_via
_Forrester
http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/oracle-bisecurity-toolkit-faq-1904307.pdf
http://docs.oracle.com/cd/E28280_01/bi.1111/e25318/getstarted.htm#CHDGEEAJ
https://support.oracle.com/epmos/faces/ui/km/DocumentDisplay.jspx?_afrLoop=4222121
44633512&id=1293391.1
44
Questions?
Christian Screen, Oracle BI Practice Lead
Analytic Vision
(704) 909-2301
[email protected]

similar documents