If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

Multiple Security Providers?

Started by the_real_beaver, 22 Jul 2020 06:06:07 PM

Previous topic - Next topic

the_real_beaver

Can you set up a security provider in Cognos for Authentication, but have the Roles and Groups be proved by a different provider?
I understand that you can create them all inside Cognos, but how would you move those roles into different Cognos environments (ie Dev, Stage, Prod?) if that route was chosen.


MFGF

Quote from: the_real_beaver on 22 Jul 2020 06:06:07 PM
Can you set up a security provider in Cognos for Authentication, but have the Roles and Groups be proved by a different provider?
I understand that you can create them all inside Cognos, but how would you move those roles into different Cognos environments (ie Dev, Stage, Prod?) if that route was chosen.

Hi,

The first option would only work if you somehow forced all users to log in to both providers. If they just log into the first, Cognos won't understand that the groups and roles in the other provider apply to that user.
If you create the groups and roles in the Cognos namespace, you can deploy these from one instance to another. Do make sure that you are using the same authentication provider in all instances though, and that the provider is defined in exactly the same way (same namespace name etc).

Cheers!

MF.
Meep!

the_real_beaver

Thank you for the clarification. Can you tell me how difficult it is to apply the groups and Roles to the different environments?

MFGF

Quote from: the_real_beaver on 23 Jul 2020 08:09:22 AM
Thank you for the clarification. Can you tell me how difficult it is to apply the groups and Roles to the different environments?

Hi,

First you need to export them - see step 11 in the documentation link:

https://www.ibm.com/support/knowledgecenter/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.ug_cra.doc/t_asg_create_export_deployment_spec.html#asg_create_export_deployment_spec

Plan carefully though - the entire set of Cognos groups and roles will get brought in when you import. Make sure that you're not going to overwrite things and cause issues in the target environment. You should probably map out what is there currently and what will get imported and make sure you understand fully what you will end up with.

Cheers!

MF.
Meep!