If you are unable to create a new account, please email support@bspsoftware.com

 

Cognos SSO Login with AD surname change does not grant access

Started by Cognos91, 15 Apr 2021 02:12:08 PM

Previous topic - Next topic

Cognos91

Hi,
Checking to see if anyone has any inputs around AD surname change where the user is unable to access their reports under My Content folder. SSO is enabled, and we have third party java authentication enabled.
Any ideas on how to navigate through the surname change in AD and gain access to previous reports under the user's maiden name.


cognostechie

Hi

You can copy the content from their 'My Folders' of old account to new account. There is an option in the security of Administration page which lets you copy the content to another user (Anonymous) and then from Anonymous to the new account.

Not sure of the steps as I did this some time back. 

sdf

Question,

Are you saying that after changing the surname in AD, that triggered a new user profile in congos?
So now, in cognos you can see the user profile with the new surname but My folders content are gone?

maybe you can try to create another AD user with the users previous surname and see if Content Manger willbe able to identify that and retained the My folders content.

cognostechie

Depending on how your custom java authentication provider (presumably CJAP) passes the token, it's possible that Cognos could have created a new profile. If you have access to the Content Store database, you can see all users there with this SQL:

SELECT
    cmobjprops1.cmid,
    cmobjprops33.name Full_Name,
    cmobjprops1.givenname,
    cmobjprops1.surname,
    cmobjprops1.busphone,
    cmobjprops1.email,
    cmobjprops1.clocaleid,
    cmobjprops1.prodlocale,
    cmobjprops1.objid,
FROM   cmobjprops1, cmobjprops33 
WHERE cmobjprops1.cmid = cmobjprops33.cmid
order by Full_Name