COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: Cognos91 on 15 Apr 2021 02:12:08 PM

Title: Cognos SSO Login with AD surname change does not grant access
Post by: Cognos91 on 15 Apr 2021 02:12:08 PM
Hi,
Checking to see if anyone has any inputs around AD surname change where the user is unable to access their reports under My Content folder. SSO is enabled, and we have third party java authentication enabled.
Any ideas on how to navigate through the surname change in AD and gain access to previous reports under the user's maiden name.

Title: Re: Cognos SSO Login with AD surname change does not grant access
Post by: cognostechie on 15 Apr 2021 07:35:52 PM
Hi

You can copy the content from their 'My Folders' of old account to new account. There is an option in the security of Administration page which lets you copy the content to another user (Anonymous) and then from Anonymous to the new account.

Not sure of the steps as I did this some time back. 
Title: Re: Cognos SSO Login with AD surname change does not grant access
Post by: sdf on 19 Apr 2021 07:39:51 AM
Question,

Are you saying that after changing the surname in AD, that triggered a new user profile in congos?
So now, in cognos you can see the user profile with the new surname but My folders content are gone?

maybe you can try to create another AD user with the users previous surname and see if Content Manger willbe able to identify that and retained the My folders content.
Title: Re: Cognos SSO Login with AD surname change does not grant access
Post by: cognostechie on 19 Apr 2021 01:50:46 PM
Depending on how your custom java authentication provider (presumably CJAP) passes the token, it's possible that Cognos could have created a new profile. If you have access to the Content Store database, you can see all users there with this SQL:

SELECT
    cmobjprops1.cmid,
    cmobjprops33.name Full_Name,
    cmobjprops1.givenname,
    cmobjprops1.surname,
    cmobjprops1.busphone,
    cmobjprops1.email,
    cmobjprops1.clocaleid,
    cmobjprops1.prodlocale,
    cmobjprops1.objid,
FROM   cmobjprops1, cmobjprops33 
WHERE cmobjprops1.cmid = cmobjprops33.cmid
order by Full_Name