TM1 Forum

I am trying to set up SSO in Planning Analytics 2.0.6 and Cognos 11.0.12, security mode 5. I can use CAM to login, and it works without issues in all applications. The problem is particularly SSO, I am always prompted for user id and password. In Architect if I login once, then log out and login again within the same session, the second time user ID and password won't be requested. If I reopen Architect, it will require credentials again.
IE is set to Automatic logon in all zones.
SinglSignonOption is set in the namespace advanced properties.
Any ideas?
Thank you.

Did you find a solution? I have the same issue?

Hello svar229,

some more information would be useful. Is your TM1 Adminhost and Cognos Analytics at the same server/machine ?


If not can you telnet the ip and port of the CA from the Tm1 Server?

Which LDAP u use?

BR
HighKeys

we configure this but its more pain to do this(ower 50 steps to correctlu work on all clients).
We active use our IBM support to correctly configure this with ssl and sso.
Think you need to folow on IBM customer supports.

Hi, First thing is check your Cognos Analytics instance, does single sign on work there. If it does read on to Part B, otherwise start with Part A.

Part A - check cognos analytics
1) Since you've chosen to use the remote_user method for single sign on, have you put IdentityMapping and SingleSignonOption in the advanced properties, I noticed a typo in your message so double check this is spelt correctly.
2) Check you've got the gateway component of Cognos Analytics installed
3) Ensure IIS has been configured for SSO, use the script provided in the install to aid configuration. The URL rewrites with the BI folder should have the rules legacy SSO and SSO Login enabled
4) Your gateway URI within Cognos configuration should be pointing to your gateway, servername:port/ibmcognos/bi/v1/disp
5) If it's still playing up and your IE settings are correct have a look at the authentication for the ibmcognos, ibmcognos/bi and sso folders/applications. Try windows authentication for the ibmcognos/SSO
and anonymous for ibmcognos & ibmcognos/bi
Hopefully that should solve the Cognos Analytics side

Part B - check planning analytics
Make sure your tm1s.cfg for planning analytics has the following settings
SecurityMode = 5
ServerCAMURI = http://servername:9300/p2pd/servlet/dispatch
ClientCAMURI = http://servername:80/ibmcognos/bi/v1/disp
If any settings had to be changed restart the Planning analytics service.

Yes there are other files to configure for authentication through BI, but the above should solve your issues with SSO in particular.