Setting up Cognos SSO

Setting up Cognos SSO

Question

Is it possible to SSO into Cognos from Digital Hive?

Answer

Yes, it is possible, but it requires our Digital Hive jar files and some changes to all of the IBM Cognos Content Managers in your environment.

IBM Cognos Analytics Configuration Steps

  1. Download our Digital Hive Tap files:  https://releases.digitalhive.com/TSP/TAPfiles.zip
  2. Unzip/Extract TAPfiles.zip
    adfcore-cognos-sso-2.0.fl3-f725b49bd.jaradfcore-encryption-1.0.jar and theiaAuth.properties are the files used in the following steps
  3. On the IBM Cognos Environment for the Content Manager, open File Explorer and navigate to: [Cognos install home]\webapps\p2pd\WEB-INF
  4. Create a new folder called AAA
    Case is Important
  5. Navigate into the AAA folder create a new folder called lib
  6. Copy adfcore-cognos-sso-2.0.fl3-f725b49bd.jar and adfcore-encryption-1.0.jar files from step 2 into the lib folder, i.e. they should be placed here:
    [Cognos install home]\webapps\p2pd\WEB-INF\AAA\lib
  7. Copy the theiaAuth.properties file from step 2 into [Cognos install home]\configuration
  8. Launch Cognos Configuration for the Content Manager
  9. Under the Authentication node, create a new namespace called dhsso
  10. Change Type to Custom Java Provider
  11. Set the Namespace ID property to dhsso
  12. Set the java class name to com.motio.cognos.sso.ADFCognosTrustedAuthenticationProvider
  13. Set Selectable for authentication to false
  14. Save and test (If there is an error: [ERROR] Header names and values on ADF SSO request don’t match, failing SSO attempt. in the dialog, that is ok.)
  15. Select Active Directory namespace that is already configured
  16. Go to Advanced Properties and ensure that the Identity Mapping is enabled.
    NOTE: This will vary depending on the version of LDAP or Active Directory. Example: singleSignonOption=IdentityMapping
  17. Click in the Value column for Advanced properties and click the edit icon
  18. In the Value – Advanced properties dialog box, click Add
  19. In the Name column, type SingleSignonOption
  20. In the Value column, type IdentityMapping
  21. In the Name column, type trustedCredentialType
  22. In the Value column, type IdentityMappingForTC
  23. Click OK
  24. Click Save
  25. Edit [install-home]\configuration\theiaAuth.properties
  26. Change the value of target.namespace.id=[the namespace ID from step 15]. For example: target.namespace.id=ActiveDirectory
  27. Set the encryption.passCode value to any value, for example, secret
  28. Restart IBM Cognos Content Manager
    NOTE: If you get these errors:

    Place the jar files in [Cognos install home]\webapps\p2pd\WEB-INF\lib instead of the AAA folder.

Digital Hive Configuration

  1. Launch Digital Hive and login with an admin account
  2. Click your Avatar  
  3. Select Manage Digital Hive
  4. Click 
  5. Click 
  6. Click 
  7. Enter a Name, such as Cognos Analytics SSO
  8. In the Authentication Method dropdown, select Cognos SSO
  9. In the System Credentials section, enter the system account credentials and Namespace
  10. In the Server information section, enter the Gateway and Dispatcher information
  11. In the Properties section, enter the Default Namespace ID, SSO Namespace ID, a Password (this is what you set in the theiaAuth.properties file in step 27), for SSO Header, enter REMOTE_USER
  12. Click Save
  13. Now you will want to add Cognos Analytics content that you want to access in Digital Hive. In this example, I already have a File System connector with an Images folder added, if this is your first connector you won't see that.
  14. Click  beside Team Content to make it searchable
  15. Click Team Content and you will see the content that you can expose. If you want to only show Samples, then click and drag Samples to the content folder

    NOTE: If you wanted to show everything, you could drag Team Content to the content folder
  16. Click 

    • Related Articles

    • Cognos SSO not working in Digital Hive 2024.1

      Question IBM Cognos analytics Single Sign-on (SSO) is no longer working after deploying the Digital Hive 2024.1 version. Answer The tomcat properties in the Digital Hive server requires a line added. Setup steps: 1. From Services stop the node1 ...
    • Running IBM Cognos Analytics Reports

      Question How do I run Cognos Reports? Answer The default setting for IBM Cognos Analytics reports is to display the saved report. Here are the steps to execute a report instead of showing the saved report: Click your avatar Select Manage Digital Hive ...
    • Connecting to IBM Cognos Analytics

      Question How do we connect Digital Hive to IBM Cognos Analytics? Answer As a Digital Hive administrator, connecting to IBM Cognos Analytics can be accomplished via the following steps: Open the Digital Hive Control Center Click on the Connectors and ...
    • Getting Prompted for IBM Cognos Analytics Credentials

      Question When viewing a Digital Hive page that contains an IBM Cognos Analytics visualization, the IBM Cognos Analytics login screen appears instead of the visualization. My IBM Cognos Analytics connector credentials are persisted as part of my ...
    • Using IBM Cognos Analytics APIkey Authentication

      Overview As of the Digital Hive 2024.2 release, it is possible to leverage API keys generated in IBM Cognos Analytics, to secure and access Cognos content. This method of authentication should be considered when traditional Single Sign On options ...