COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: charlie on 15 Oct 2018 02:00:36 PM

Title: Enable SSO in Cognos Analytics 11.0.10
Post by: charlie on 15 Oct 2018 02:00:36 PM
Hi All!

We are planning to set up single signon for a Cognos Analytics R10 environment that's already running without SSO. I have the Optional Gateway and IIS configured already (we use it for load balancing today). I did all the SSO related steps that were skipped while configuring IIS when the install was done, but am still getting prompted to enter credentials. Clueless on what could be going wrong. Does anyone know a resource that I can refer to, to configure SSO for a already live environment. I've tried combing the web but have had no success so far.  Found a lot of pointer that i tried and tested (including some in this community) but got all sort of weird errors and kept reverting.

Thanks in advance!

Best,
Charlie
Title: Re: Enable SSO in Cognos Analytics 11.0.10
Post by: TomCognos on 15 Oct 2018 07:29:36 PM
Have a read through here

https://www.cognoise.com/index.php/topic,32825.0.html

See if any of that helps. Sometimes just deleting things and starting again helped.
Title: Re: Enable SSO in Cognos Analytics 11.0.10
Post by: Penny on 18 Oct 2018 02:01:04 PM
Perhaps check your browser settings.  I think in IE you need to enable integrated windows authentication.  It is an advanced setting.  Single sign on works for me with IE with this setting, but in Firefox I don't have it enabled and I need to authenticate.
Title: Re: Enable SSO in Cognos Analytics 11.0.10
Post by: charlie on 17 Dec 2018 05:47:29 AM
So i failed to mention that I was trying to use Open ID Connect as a provider while trying to do this SSO set-up. And my environment is 11.0.10.

IBM says that its possible to do use Open ID Connect from 11.0.7 and beyond, so I thought I was ok. But there's a caveat, if you are not using IBMid or ADFS or Google or Siteminder or any other of the OpenID connect types that is available in the drop down when you add a new namespace and select Open ID Connect, you need to use the type 'generic'. But 'generic' type is available from 11.0.11 onwards. So I need to upgrade and then give it a shot again.

Will post back when (if) i get there. Thanks for your response everyone!

Cheers!

Charlie