Security: Cannot add TM1 client (user) when IntegratedSecurityMode=5

[mama]

Hi all,

I am using Cognos Express 10.2.2, TM1 and BI. I followed the documentation to integrate BI security with TM1. It works (almost) fine: I open SData in Architect and get prompted with the correct Active Directory Namespace.

So far so good.

By using the option IntegratedSecurityMode=5 I expected to be able to logon with the BI security AND THE TM1 SECURITY. Or am I missing something? Why can't I access with admin/apple anymore?

Thanks!

[tomok]

By using the option IntegratedSecurityMode=5 I expected to be able to logon with the BI security AND THE TM1 SECURITY

Where did you get this idea? According to the IBM documentation on IntegratedSecurityMode=5:

The server uses IBM Cognos BI security authentication and supports user groups from both Cognos Xcelerator and Cognos BI.

Use security mode 5 when you are running IBM Cognos Express® Planner Applications with IBM Cognos BI security.

Considerations when using this mode:

In Cognos Xcelerator,Cognos BI users can belong to both Cognos BI and Cognos Xcelerator groups.
You can not use Cognos Xcelerator to permanently assign a Cognos BI user to another Cognos BI group. Any user assignment you make in Cognos Xcelerator to a Cognos BI group is not saved back to Cognos BI. When a Cognos BI user logs in to Cognos Xcelerator, the group assignments in Cognos BI override any Cognos BI group assignments made in Cognos Xcelerator.

Authentication is the log in part. If you use 5 the log in has to be through CAM security.

[mama]

Hi tomok,

Thanks a lot for your reply.

I upgrade from Cognos Express 10.1 to Cognos Express 10.2.2. In Cognos Express 10.1 I have used Cognos Administration for integration of Cognos namespace and Active Directory and TM1.

My main problem now is enabling Windows security for using TM1 10.2.2. I thought that it would be the best choice to install BI Server - only for using BI Administration, CAM security. Bad idea?

Thanks!