Real SSO with TM1Web Kerberos/Integrated Login

[CEL3K5]

Hello,

I am exploring the possibility to switch our TM1-Landscape to Integrated Login via Kerberos.
Up To now a lot of things work fine like SSO-"Fat Client"-Login.

Nevertheless there is one thing I do not get to work: Real SSO with browser to TM1.
If I type in my credentials and password into TM1Web, I can login via Kerberos.

But I do not find a way that the credentials/password gets automatically filled. Is this possible at all?

I am working with TM1 10.2.2 in a windows server/client-landscape with IE as browser.

Kindly regards
Peter

[gtonkin]

I think the difference is that SSO is not the same as how you expect integrated login to function. SSO expects you to provide you username and password then authenticates it with the relevant server as configured in your Kerberos settings. AFAIK, after many hours fiddling and reading on IBM's various sites, 10.2.2 FP4 at least works like this.

Edit-forgot to add this link

[mattgoff]

Integrated login (i.e. credentials passed directly/automatically from the OS to TM1) was broken in TM1 Web when they transitioned from IIS to Tomcat, v10 IIRC. SSO still works everywhere, but as you note you have to re-enter credentials when using TM1 Web.

Matt

[lotsaram]

It is possible in TM1 Web 10.2.2. I have seen it. Some hacking is necessary and needs to be re-done after each FP upgrade, but "click-through" login can be done.

[pandinus]

Why not use CAM?

[CEL3K5]

Thanky you very much for your answers.

Why not use CAM?

Can I use CAM in a TM1-only Environment? Or do I need "a full COGNOS BI"-environment?

[BrianL]

There's also this option - https://www.ibm.com/developerworks/comm ... .2.2%20FP2

[declanr]

There's also this option - https://www.ibm.com/developerworks/comm ... .2.2%20FP2

I had a look at this a while ago but when I recently tried to find the tm1websso.zip file I couldn't find it on developerworks. Could someone more capable of navigating IBM sites point me in the right direction?
I was sure I had previously downloaded a copy but cant find it anywhere.

[BrianL]

If you click on the community name, you get taken to https://www.ibm.com/developerworks/comm ... dfff320fef

From there under the files section you can find the .zip file.

For convenience the direct link is https://www.ibm.com/developerworks/comm ... 1efa787d89

[declanr]

Thanks for that; I had expected it to be an attachment on the actual article like the debugger page for instance.
Appreciate the pointers as it will give me more of an idea for navigating it in the future.

[gtonkin]

Thanks guys-very useful feedback-appreciate the education.