TM1 9.4 Web - Integrated Login

[kaytejt]

Hello,

I am recieving an error when trying to log in via TM1 Web.

Microsoft Internet Explorer:
Integrated Login Failed. Please Try Again... 80: TM1APIDOTNET Exception - System Server Client Not Found

In IIS, I have it set to Integrated Login and also configured in the tm1s.cfg file. I tried two authentication modes, one with Kerberos and the other with NTFS.

Thoughts?

[kangkc]

Seems like you have NOT set up the user -> Windows Account in your TM1 server. Have you tried using integrated login with TM1 client? If TM1 client can't log you in, you have not setup integrated login correctly..yet...

[lotsaram]

Just to elaborate on what kangkc has mentioned, this error is what you would usually receive when trying to log in as a user who does not exist on the TM1 server.

It is not enough just to turn integrated login on. There must be a match between the windows user ID from the Kerberos certificate and a client in the clients dimension, actually it is more specific than this, as the match needs to be to the UniqueID measure in the }ClientProperties cube. In principle this is all that is required to set up integrated login, (the whole LDAP import process is largely a waste of time and unnecessarily overcomplicates things...)

Assuming that you know all this already and have integrated login working with the Excel client then the most common problem would be users accessing TM1 from different domains and/or the web server being on a different domain from the TM1 app server. When it just works it's great, when it doesn't it can be tricky to troubleshoot.

[JohnMcC]

Hi,
I've been having the same problem - Server Client not found. It only started when I "upgraded" to FP2 this morning. After a lot of searching (This forum & the Internet) I ended up having a look at the web.config file in the TM1Web root folder. What I noticed was the current - non working - config file had the Identity Impersonate set to false whereas in the previous version it was set to true. Taking a chance I changed it and bingo TM1Web now allows Integrated logins

The setting is right towards the bottom in the config file.

<authentication mode="Windows" />
<identity impersonate="true" />

[djwebstuff]

Thanks so much for your help.... it got me up and running as well. Here is some for (maybe) useful info. In the web.config file (version 9.5) the instructions for setting up Integrated Login are included. Funny enough, this isnt in the install documentation.


<!-- To enable integrated login:
1. Set the "IntegratedLogin" attribute to "true" here.
2. Set <identity impersonate=true /> later in this file.
3. In IIS, turn off "Enable anonymous access"
4. In IIS, turn on "Integrated Windows authentication"
-->
<add key="IntegratedLogin" value="true" />