TM1 Forum

Need some advise.

We are in a situation where we need to implement AD Integrated login with TM1 service running with a domain account that's different from users who are authenticated with another domain.

Based on how I understand, this should work if both domains have a trusted relationship established. Question is do we need to go Kerberos or this will work with NTLM ?

Kerberos is something we will need to look at when integrating with TM1 Web but this will come later. For now we just need to make sure cross domain integration will work with basic NTLM as Kerberos is another monster by itself.

Thanks in advance for any feedback.

Integrated Login as in IntegratedSecurityMode=2 (Mixed Mode) or IntegratedSecurityMode=3 (Integrated Login only) ?

Are you using TM1 10.2 or newer ?
Are you using TM1 Web ?
Do you intend to perform a Single Sign On (SSO) ?


http://www-01.ibm.com/support/docview.w ... wg27039576
IBM Cognos TM1 Web Frequently Asked Questions (FAQ)

Product documentation

Abstract
A list of information about how the IBM Cognos TM1 Web version 10.2 differs from previous versions.

Content
IBM Cognos TM1 Web version 10.2 FP1 FAQ

Q:
What are the known differences with the new web product?

A:
Changed Features:

10.
NTLM security is not currently supported. Per Microsoft this is not a recommended setting.

11.
Windows Authentication. Windows Authentication (mode 3) is still available. However, with the move to a Java webserver, single signon is not currently available. You need to input your user id and password to login to the web. For more help with setting up integrated security see the following document: IBM Business Analytics Proven Practices: Configuring Integrated Security for Cognos TM1 Web 10.2
Single sign on is possible by setting up Cognos BI security with single signon and then setting TM1 to use Cognos security (see doc section: Using Cognos security with Cognos TM1). Cognos BI is included with TM1 with restricted usage. Customers are licensed to use it for security.


http://www.ibm.com/developerworks/libra ... index.html
IBM Business Analytics Proven Practices: Configuring Integrated Security for Cognos TM1 Web 10.2

How to set up integrated Windows Authentication for TM1 Web which now is a Java application in Cognos TM1 10.2 release. This is a supplement to the current product documentation.