Single Sign On Errors

Post Reply
User avatar
Ajay
Regular Participant
Posts: 183
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Single Sign On Errors

Post by Ajay »

Morning All

We are experiencing some strange features with our setup of TM1 (10.1.1) and Cognos BI (10.1.1).

We've configured TM1 to use single-sign on, and set our IntegratedSecurityMode=5 in the TM1s.cfg

For users other then those assigned to the Admin groups, when logging on they are presented the persepctives window with no expandable cubes or dimensions in the viewer. Additionally, the security check for the group they have been assigned to looks as if it is removed when they login. I have reset the check box and got the user to F5 their session and they can then see all cubes and dimensions, and use TM1 normally.

This seems very strange, as SSO appears to be removing their security. Note this is not happening to admins. I have made sure that their network usernames are defined within the }ClientProperties cubes under the UniqueID property.

I think that this issue may be impacting another area which is when running reports in Cognos BI built from the TM1 cubes above, the user experiences an error which details no connection to the external source (which incidentally is the framework manager package). However again this works for admins even though our security suggests all users have access to run the reports.

Not sure if anyone has experienced these issues and was there a solution ?

Cheers
Ajay
User avatar
jim wood
Site Admin
Posts: 3961
Joined: Wed May 14, 2008 1:51 pm
OLAP Product: TM1
Version: PA 2.0.7
Excel Version: Office 365
Location: 37 East 18th Street New York
Contact:

Re: Single Sign On Errors

Post by jim wood »

I can't remember off the top of my head the different security modes (I'm sure somebody will help me out with that) but the admin group once assigned is not impacted by any other security. If you are using CAM for security then you need to create the groups there, assign the users to the groups then set the appropriate security for the group in TM1. But if 5 is mixed mode then you shouldn't need to do that. Have you checked the service admin settings in the admin console rather than the cfg?

Jim.
Struggling through the quagmire of life to reach the other side of who knows where.
Go Build a PC
Jimbo PC Builds on YouTube
OS: Mac OS 11 PA Version: 2.0.7
Post Reply