Single Sign On problem

Post Reply
AskAndAnswer
Posts: 41
Joined: Fri Jun 02, 2017 6:35 pm
OLAP Product: Planning Analytics
Version: 2.0...
Excel Version: 2016

Single Sign On problem

Post by AskAndAnswer »

I am trying to set up SSO in Planning Analytics 2.0.6 and Cognos 11.0.12, security mode 5. I can use CAM to login, and it works without issues in all applications. The problem is particularly SSO, I am always prompted for user id and password. In Architect if I login once, then log out and login again within the same session, the second time user ID and password won't be requested. If I reopen Architect, it will require credentials again.
IE is set to Automatic logon in all zones.
SinglSignonOption is set in the namespace advanced properties.
Any ideas?
Thank you.
svar229
Posts: 5
Joined: Mon Mar 16, 2020 4:10 pm
OLAP Product: TM1/ Planning Analytics
Version: 10.2.2/ PA2.07
Excel Version: 2016

Re: Single Sign On problem

Post by svar229 »

Did you find a solution? I have the same issue?
HighKeys
Posts: 117
Joined: Fri Aug 09, 2019 10:11 am
OLAP Product: TM1 / TM1 Web / Perspectives
Version: Planning Analytics V2.0.9
Excel Version: Office 365

Re: Single Sign On problem

Post by HighKeys »

Hello svar229,

some more information would be useful. Is your TM1 Adminhost and Cognos Analytics at the same server/machine ?


If not can you telnet the ip and port of the CA from the Tm1 Server?

Which LDAP u use?

BR
HighKeys
Drg
Regular Participant
Posts: 159
Joined: Fri Aug 12, 2016 10:02 am
OLAP Product: tm1
Version: 10.2.0 - 10.3.0
Excel Version: 2010

Re: Single Sign On problem

Post by Drg »

we configure this but its more pain to do this(ower 50 steps to correctlu work on all clients).
We active use our IBM support to correctly configure this with ssl and sso.
Think you need to folow on IBM customer supports.
burnstripe
Regular Participant
Posts: 197
Joined: Wed May 06, 2020 2:58 pm
OLAP Product: Planning Analytics
Version: 2.0.9
Excel Version: 2016

Re: Single Sign On problem

Post by burnstripe »

Hi, First thing is check your Cognos Analytics instance, does single sign on work there. If it does read on to Part B, otherwise start with Part A.

Part A - check cognos analytics
1) Since you've chosen to use the remote_user method for single sign on, have you put IdentityMapping and SingleSignonOption in the advanced properties, I noticed a typo in your message so double check this is spelt correctly.
2) Check you've got the gateway component of Cognos Analytics installed
3) Ensure IIS has been configured for SSO, use the script provided in the install to aid configuration. The URL rewrites with the BI folder should have the rules legacy SSO and SSO Login enabled
4) Your gateway URI within Cognos configuration should be pointing to your gateway, servername:port/ibmcognos/bi/v1/disp
5) If it's still playing up and your IE settings are correct have a look at the authentication for the ibmcognos, ibmcognos/bi and sso folders/applications. Try windows authentication for the ibmcognos/SSO
and anonymous for ibmcognos & ibmcognos/bi
Hopefully that should solve the Cognos Analytics side

Part B - check planning analytics
Make sure your tm1s.cfg for planning analytics has the following settings
SecurityMode = 5
ServerCAMURI = http://servername:9300/p2pd/servlet/dispatch
ClientCAMURI = http://servername:80/ibmcognos/bi/v1/disp
If any settings had to be changed restart the Planning analytics service.

Yes there are other files to configure for authentication through BI, but the above should solve your issues with SSO in particular.
Post Reply