How to find/add the correct session parameter for certain AD fields?

[JDawg]

Hello all,

I'm somewhat new to Cognos (SAP for 10yrs) and it's been a joy to learn but I'm more of a report developer and not an admin so forgive me if this is an easy question or it's been asked (I have tried searching but don't know what to search for).

So in Cognos, there are session parameters (defaultName, Title, email, givenName, surname, userName, etc.) that map back to certain AD fields for a user. The company I'm consulting for has an employeeID field that is stored in the Attribute section of the user's AD profile and we need to expose this in reports for multiple reasons. Now it's my understanding that we can add extra parameters to the Cognos global config to be able to pull in extra fields to use as session parameters from user's AD profiles.

My question is...how do I go about finding what cognos parameter (I'm guessing LDAP parameter?) we need to use in order to map to this AD attribute field so we can bring this in as a session parameter in the reports? Is there a global list out there that says.....here's AD fields and here is the name of the ldap parameter, in order to add that as a session parameter in Cognos?

Again sorry if I'm not wording it correctly but hopefully someone understands what I'm trying to accomplish.

[nichollsvi]

Hi,

I think I understand what you are referring to.

In our report, we have a user query. The only data item inside that is called User, with an expression definition of #sq($account.defaultName)#.

We use this in one of our prompt queries. We are restricting budget access to certain areas. We have a LOV (List of Values) with all the userids and the budget codes in them. In that prompt query, use a filter saying uppercase the query/LOV userid =  upper(#sq($account.defaultName)#).

Our LOV that I discussed, is a materialized view that pulls the userid and budget information from another table. That's gotten data from another table. That's as far as I can trace.

What I could suggest from this in your Cognos Configuration, under Security, you should have Cognos and then another entry for your LDAP.  Is that information filled out, or have you at least gotten this far? That's probably about as far as I can help you.

One other thing might help, even if it is old: http://www-01.ibm.com/support/docview.wss?uid=swg21341035

If you open Framework Manager, log into Active Directory namespace and then type #sq($account.defaultName)# macro -- you'll just see the output. I think that should work for you.

[JDawg]

Hi Nichollsvi, thanks for replying. Unfortunately we can't pull this information into a table/view, we need to pull it straight from the user's AD profile through LDAP but I'm just not certain how. I understand how to use session parameters in reports, it's a matter of how to add a new session/global parameter for information that does not get exposed by default.

I know that it's an attribute field in Active Directory and I know the field name but I don't know what the LDAP mapping would be to bring in this field. Hope that makes sense.

[MFGF]

Hi Nichollsvi, thanks for replying. Unfortunately we can't pull this information into a table/view, we need to pull it straight from the user's AD profile through LDAP but I'm just not certain how. I understand how to use session parameters in reports, it's a matter of how to add a new session/global parameter for information that does not get exposed by default.

I know that it's an attribute field in Active Directory and I know the field name but I don't know what the LDAP mapping would be to bring in this field. Hope that makes sense.

Hi,

Did you follow the link nichollsvi posted above?  http://www-01.ibm.com/support/docview.wss?uid=swg21341035

This details how to add in custom LDAP attributes which can then be referenced as session parameters. This sounds like it's exactly what you need here? Or am I misunderstanding?

Cheers!

MF.

[JDawg]

I did and it did help my understanding of it, I am working with the resource in the Active Directory dept to understand what the exact field name is we need to bring in.

Thanks,

JDawg

[Blue]

The IBM How to page is a little unclear. It should read something like "In the XXX - Namspace - Resource Properties window, click in the Value column for Custom properties under the Account mappings (Advanced) section and click the Edit button (pencil icon at far right of cell)."

Q. Do we need at add this new variable in the FMW model under Project - Session Properties?

[Blue]

A related Q. Why don't I see all the Account parameters visible in Cognos Configuration in the FWM model under Project - Session Parameters?

Another Q. How do I know when to use the format #account.<parameter> vs $account.parameters.<parameter> vs $account.personalInfo.<parameter>?