Page 1 of 1
Real SSO with TM1Web Kerberos/Integrated Login
Posted: Wed Feb 15, 2017 12:25 pm
by CEL3K5
Hello,
I am exploring the possibility to switch our TM1-Landscape to Integrated Login via Kerberos.
Up To now a lot of things work fine like SSO-"Fat Client"-Login.
Nevertheless there is one thing I do not get to work: Real SSO with browser to TM1.
If I type in my credentials and password into TM1Web, I can login via Kerberos.
But I do not find a way that the credentials/password gets automatically filled. Is this possible at all?
I am working with TM1 10.2.2 in a windows server/client-landscape with IE as browser.
Kindly regards
Peter
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Wed Feb 15, 2017 7:05 pm
by gtonkin
I think the difference is that SSO is not the same as how you expect integrated login to function. SSO expects you to provide you username and password then authenticates it with the relevant server as configured in your Kerberos settings. AFAIK, after many hours fiddling and reading on IBM's various sites, 10.2.2 FP4 at least works like this.
Edit-forgot to add
this link
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Wed Feb 15, 2017 8:05 pm
by mattgoff
Integrated login (i.e. credentials passed directly/automatically from the OS to TM1) was broken in TM1 Web when they transitioned from IIS to Tomcat, v10 IIRC. SSO still works everywhere, but as you note you have to re-enter credentials when using TM1 Web.
Matt
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Wed Feb 15, 2017 8:48 pm
by lotsaram
It is possible in TM1 Web 10.2.2. I have seen it. Some hacking is necessary and needs to be re-done after each FP upgrade, but "click-through" login can be done.
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 12:12 pm
by pandinus
Why not use CAM?
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 12:35 pm
by CEL3K5
Thanky you very much for your answers.
Why not use CAM?
Can I use CAM in a TM1-only Environment? Or do I need "a full COGNOS BI"-environment?
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 2:33 pm
by BrianL
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 2:41 pm
by declanr
I had a look at this a while ago but when I recently tried to find the tm1websso.zip file I couldn't find it on developerworks. Could someone more capable of navigating IBM sites point me in the right direction?
I was sure I had previously downloaded a copy but cant find it anywhere.
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 3:39 pm
by BrianL
If you click on the community name, you get taken to
https://www.ibm.com/developerworks/comm ... dfff320fef
From there under the files section you can find the .zip file.
For convenience the direct link is
https://www.ibm.com/developerworks/comm ... 1efa787d89
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 5:47 pm
by declanr
Thanks for that; I had expected it to be an attachment on the actual article like the debugger page for instance.
Appreciate the pointers as it will give me more of an idea for navigating it in the future.
Re: Real SSO with TM1Web Kerberos/Integrated Login
Posted: Fri Feb 17, 2017 6:06 pm
by gtonkin
Thanks guys-very useful feedback-appreciate the education.