TM1 10.2 Web Windows authentication

vins · Post by **vins** » Thu Nov 14, 2013 8:09 am

Hi Experts,

I read a lot of article regarding this issue and searched in Google too.

Environment is upgraded from TM1 10.1 to 10.2 . In TM1 web , When using "Windows Authentication" option , i am not able to log in. I am getting an error stating " A server error has occurred".

If i use Native authentication as an option. I am able to log in.
Able to log in into TM1 perspective and Tm1 architect using integrated login.
Kindly post if you require any information regarding this incase its missing.

Please help me to log in using "Windows Authentication option" in TM1 web page.

Thanks in advance

Gabor · Post by **Gabor** » Thu Nov 14, 2013 9:07 am

Here is the answer I have received from IBM support:
"At this present time there is a issue ... with Kerberos and integrated logon ... This issue is being fixed in FP1 of 10.2 and there is going to be a change to the architecture. At this time there is no workaround in place."

No exact date for FP1, but "sometime in December".

vins · Post by **vins** » Mon Nov 18, 2013 8:14 am

Thanks Gabor,

Will be waiting for FP1.

Feldmani · Post by **Feldmani** » Fri Jan 10, 2014 9:03 pm

Any updates on this? I believe it is supposed to be fixed in FP1, but has anyone got it to work yet?

rmackenzie · Post by **rmackenzie** » Sat Jan 11, 2014 2:25 am

Taking the release notes at face value would indicate that no, they haven't fixed this issue. Perhaps they haven't read this.

Gabor · Post by **Gabor** » Sun Jan 12, 2014 7:46 pm

I have tried to claim that after I received TM1 10.2 FP1. I was told, Integrated Login is not yet fixed.
Then I was pointed to a small chapter in "FAQs\...known differences...\Changed Features", which still tells us ...

"11. Windows Authentication. Windows Authentication (mode 3) is still available. However, with the move to a Java webserver, single sign on is not currently available. You need to input your user id and password to login to the web."

Please check: http://www.ibm.com/support/docview.wss?uid=swg27039576
(mode 2 is same as mode 3 per support)

foogy · Post by **foogy** » Fri Jan 24, 2014 10:02 pm

Is SecurityMode 5 (CAM authentication) not an option for you? You can make Cognos BI authenticate against your LDAP (e.g. a Windows AD server) and then use TM1 to authenticate against Cognos BI's CAM.

If you do not have Cognos BI anyway, then you might be interested that there is a "Cognos BI Runtime" package included in your TM1 licenses which can be used for exactly this purpose.

I like this setup as it perfectly provides Single Sign On for all TM1 tools and also access via Web Browser.

Check e.g. this page: http://www-01.ibm.com/support/docview.w ... wg27036810

KR,
foogy

TM1 Forum