TM1 Forum

Hi All,
We are trying to implement SSO between Cognos BI 10 & TM1 9.5.1.
So we imported logins id's from BI in TM1 & Copied rights from old userid(TM1 logins) to this new userid(Those which are imported). After changing IntegratedSecurityMode 4 (where it should accept BI/new id's), as soon as user logs in all rights given to him disappears (in TM1). When I give all the required rights back to the user & ask user to check then again rights disappears once he logs in. And when I check }ClientGroups cube in TM1 I can see no rights assigned to him. When TM1 user id has ADMIN access then this problem is not arising. This problem is coming for all users except those who have ADMIN rights.
Has anyone faced such kind of issue. Kindly throw some light on this issue
Thanks & Regards
Swati

This is not a bug. I suggest you RTM as this behaviour would be expected with security mode 4. In this mode both users and security group membership are defined in Access Manager. If you want users to be defined from BI but you want TM1 specific groups and group membership then you need to use security mode 5.

If I remember rightly there is something in the operations guide about this. Also there is a document from IBM floating around about it. I have managed to find the document and I have attached it for you. I hope it helps,

Jim.

As Lotsaram pointed out this is not a bug. I have therefore moved this to the main TM1 forum.

Thanks everyone.. this has solved my issue..

Can anyone help me on TM1 web configuration my contributor page is working but the tm1 web has error:

"The forward URL does not exist or it has failed validation. Ensure that a valid forward URL is specified"

planning.html
// Update the following to point to the location of the planning service(s)
var planningServices = ["http://T01179A07.honda.com:9300"] ;

variables_tm1.xml
<?xml version="1.0" encoding="UTF-8"?>
<!--
IBM Confidential
OCO Source Materials
BI and PM: tm1fragments
(C) Copyright IBM Corp. 2008, 2009
The source code for this program is not published or otherwise
divested of its trade secrets, irrespective of what has been
deposited with the U.S. Copyright Office.
-->
<CRNenv>
<urls>

<url> http://T01179A07.honda.com/TM1Web/TM1WebLogin.aspx </url>
<url> http://T01179A07.honda.com/TM1Web/TM1We ... ndler.aspx </url>
<url> http://T01179A07.honda.com/TM1Web/TM1WebMain.aspx </url>

<url> http://T01179A07/TM1Web/TM1WebLogin.aspx </url>
<url> http://T01179A07/TM1Web/TM1WebLoginHandler.aspx </url>
<url> http://T01179A07/TM1Web/TM1WebMain.aspx </url>

<url> http://10.4.134.150/TM1Web/TM1WebLogin.aspx </url>
<url> http://10.4.134.150/TM1Web/TM1WebLoginHandler.aspx </url>
<url> http://10.4.134.150/TM1Web/TM1WebMain.aspx </url>

</urls>
<cookies>
<param name="cam_passport"/>
</cookies>
</CRNenv>

I'm not sure what this has to do with single sign on? You might find that you will get a better response if you start a new thread. A lot of people on here only work with TM1 not Cognos BI so you may be missing out on valuable input.