TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post Reply
erind
Posts: 4
Joined: Wed Jan 11, 2017 7:54 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by erind »

Hi everyone,

You've all given me lots of great advice over the years reading your posts, but first time posting.

Server 1: Cognos Analytics 11.0.5 installed with optional gateway. IIS installed and this documentation followed to set up CA with IIS and SSO: https://www.ibm.com/support/knowledgece ... y_iis.html
This documentation requires IIS rewrite rules that redirect to the bi directory under webcontent.

Server 2: TM1 10.2.2 FP6. Followed the typical integration documentation: http://www.ibm.com/support/knowledgecen ... g_tm1_cont

When navigating to http://server2:9510/pmpsvc, after authenticating to BI, there are issues in being directed back to the TM1 applications. If the TM1 Application Configuration is set to http://server1:80/ibmcognos/bi/v1/disp for the BI URL, because of the redirect, it looks for planning.html in the webcontent/bi directory, where it does not exist. If the TM1 Application Configuration is set to http://server1:9300/bi/v1/disp, planning.html is found (in the webcontent dir), but the skins are being looked for in the bi directory (again, because of the redirect), where they do not exist. Ultimately, the redirects configured within IIS following the above documentation do not play well with TM1 integration. There is currently an open IBM support case attempting to resolve this, but at this point, they have determined this is not documented and not straightforward to configure, so it'll take some time for them to test and document a recommended configuration.

My question is this: does anyone have a TM1 installation integrated with Cognos Analytics that is using single sign-on? How do you have it configured?

Please let me know if you have any other questions about the configuration or would like to know more about what has been attempted in troubleshooting this.

Thanks, Erin
KingQueBIT
Posts: 1
Joined: Tue Mar 01, 2016 7:29 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by KingQueBIT »

I recently configured TM1 10.2.2 with Cognos 11 CAM Authentication with SSO.

In terms of just the config file, the following are the parameters I have used:

Code: Select all

IntegratedSecurityMode=5
ServerCAMURI=http://server1:9300/p2pd/servlet/dispatch                   
ClientCAMURI=http://server1:80/ibmcognos11(site name in IIS)/cgi-bin/cognosisapi.dll
Other than that, the biggest issue I ran into during set up was ensuring all the ports used between the servers were able to communicate.
erind
Posts: 4
Joined: Wed Jan 11, 2017 7:54 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by erind »

Thanks for your response. Yes, SSO on the TM1 apps is working with that setup in my environment too. The issues popping up are happening beyond the authentication. When I try to access http://tm1server:9510/pmpsvc, the browser redirects to the BI URL to authenticate. That works properly. When it redirects back to TM1, the "URL rewrite rules" set up in IIS as per the document above cause issues serving up the TM1 applications.

Did you follow this same documentation in IIS (https://www.ibm.com/support/knowledgece ... y_iis.html) to set up Cognos Analytics with IIS and SSO?
tomok
MVP
Posts: 2831
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by tomok »

Why would you be following directions concerning integrating IIS with Cognos Analytics? TM1, as of version 10.2, no longer uses IIS, it uses Apache.
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/
erind
Posts: 4
Joined: Wed Jan 11, 2017 7:54 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by erind »

The IIS documentation is for Cognos Analytics, not to replace TM1's web server. We're using it for Cognos Analytics to utilize single sign-on. TM1 is affected by that setup because it is being integrated with BI, and BI is using IIS. TM1's Apache web server is still there and in use, BI acts as a gateway that redirects users to TM1 applications (and therefore to TM1's web server) through the BI portal.
amikolaj
Posts: 1
Joined: Sun Nov 30, 2014 8:31 pm
OLAP Product: TM1
Version: 10.1.1 10.2 10.2.2
Excel Version: Excel 2013

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by amikolaj »

Hi erind. Did you find solution to your issue?

I recently managed to integrate TM1 web applications with Cognos Analytics 11.0.5 by manually putting planning.html and tm1web into bi folder (not webcontent).

After authenticating to BI, user is correctly redirected to TM1 web / TM1 apps.

However this solution does not seem to work with IIS rules for SSO shown in the IBM manual.

I have this issue open with IBM, but I am quite suprised that no one else stumbled upon this yet.

Thanks, Andrzej
jim2011
Posts: 9
Joined: Mon Sep 16, 2013 7:48 pm
OLAP Product: TM1
Version: 10.1
Excel Version: 2010

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by jim2011 »

My team is running into the same issue as discussed in this thread. Have any of the other posters had luck since originally posting?

Thanks!
kangkc
Community Contributor
Posts: 206
Joined: Fri Oct 17, 2008 2:40 am
OLAP Product: TM1, PA , TMVGate
Version: 2.x
Excel Version: 36x
Location: Singapore
Contact:

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by kangkc »

Though we have not done it under Analytics 11.0.x but I think the approach should be the same as BI 10.x.
One thing I am puzzled is planning.html should be in webcontent folder if you follow the steps correctly as this is being copied to respective BI folder using the "bi_interop.zip".
The fact that you didn't find it there means that you may have missed the step or unzip it to a different folder.

I do agree it is complicated but having done at least 5 environments, it definitely works if you follow the steps closely. In on of my implementation, we went all the way to implement SSL even at BI gateway, TM1 Web etc. This is complex but works.
jim2011
Posts: 9
Joined: Mon Sep 16, 2013 7:48 pm
OLAP Product: TM1
Version: 10.1
Excel Version: 2010

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by jim2011 »

kangkc wrote:Though we have not done it under Analytics 11.0.x but I think the approach should be the same as BI 10.x.
One thing I am puzzled is planning.html should be in webcontent folder if you follow the steps correctly as this is being copied to respective BI folder using the "bi_interop.zip".
The fact that you didn't find it there means that you may have missed the step or unzip it to a different folder.

I do agree it is complicated but having done at least 5 environments, it definitely works if you follow the steps closely. In on of my implementation, we went all the way to implement SSL even at BI gateway, TM1 Web etc. This is complex but works.
We had it working with all that too in BI 10.x and SSL. The problem is that planning.html is in webcontent as it is supposed to be but Cognos Analytics (11) is somehow looking for it in webcontent/bi due to the IIS redirect rules they implemented which causes it not to work.
SeanT
Posts: 3
Joined: Mon Jul 30, 2018 4:32 am
OLAP Product: Planning Analytics
Version: 2.0.4
Excel Version: 2016

Re: TM1 10.2.2 integration with Cognos Analytics 11.0.5 and SSO

Post by SeanT »

Hi erind, all,

Was wondering if anyone has managed to solve this issue? I think I am encountering similar issue, and have posted here: http://www.tm1forum.com/viewtopic.php?f=3&t=14166

Then stumbled upon this thread.
Post Reply