cognos controller - active directory and single sign on

7/31/2019 Cognos Controller - Active Directory and Single Sign On

1/8

Cognos Controller - Active

Directory and Single Sign On


2/8

Controller and Active Directory 1

Contents

Creating Active Directory Namespace in Controller ......................................................................... 2Step 1: ................................................................................................................................................. 2

Create new namespace in Cognos Configuration ............................................................................... 2

Step 2: ................................................................................................................................................. 2

Configure Cognos 8 Authentication ..................................................................................................... 2

Step 3: ................................................................................................................................................. 3

Create IIS 7.0 application pool ............................................................................................................ 3

Step 4: ................................................................................................................................................. 4

Add users to Controller Users and Controller Administrator groups within Cognos Admin ................ 4

Controller and Single Sign On ............................................................................................................. 5

Step 1: ................................................................................................................................................. 5

Add Single Sign On to AD namespace ............................................................................................... 5

Step 2: ................................................................................................................................................. 5

Change authentication in IIS ............................................................................................................... 5

Step 3: ................................................................................................................................................. 6

Configure Internet Explorer add the FQDN servername to Trusted Sites ....................................... 6

Step 4: ................................................................................................................................................. 7

Configure Internet Explorer Customer Level for Local intranet and Trusted sites ........................... 7


3/8


Creating Active Directory Namespace in Controller

Step 1:

Create new namespace in Cognos Configuration

1. Security > Authentication > Right Click > New Resource > Namespace

2. Fill in box below:

3. Add details to properties box as below. Namespace ID must be the same as the Cognos

domain name (Binding Credentials can be left unedited):

4. Test connection by right clicking the new namespace and clicking Test

5. Save (if test passes)

6. Start service

Step 2:

Configure Cognos 8 Authentication

1. Open Controller Configuration

2. Navigate to Server Authentication

3. Select Cognos 8 from Select authentication method dropdown box


4/8


4. Click Save

Step 3:

Create IIS 7.0 application pool

1. Open Programs > Administrative Tools > Internet Information Services

2. Navigate to Application Pools and right-click

3. Select Add Application Pool

4. Name the application pool Cognos and leave all settings as default

5. Select Cognos application pool, right-click and click Advanced Settings

6. Locate Identity in the window and change to Local System as below:

7. Add IIS controllerserver application to Cognos application pool by selecting and choosing

Basic Settings and setting up as below:


5/8


Step 4:

Add users to Controller Users and Controller Administrator groups within Cognos Admin

1. Open Cognos Administration (http:///ibmcognos)

2. Click on Administer IBM Cognos Content

3. Navigate to Security > Cognos > Controller Users > Set Members > Add > >Users

4. Select Domain Users/Administrators

5. Click green arrow and click OK > OK

6. Stop and start Cognos services

7. Login using AD credentials created


6/8


Controller and Single Sign On

Ensure that throughout either FQDN or NetBios is configured.

Step 1:

Add Single Sign On to AD namespace

1. Open Cognos Configuration > Security > Authentication and select the new namespace

2. Add the variables for Advanced Properties as the screen shot below:

3. Save and restart the Cognos services

Step 2:

Change authentication in IIS

1. Open Start > Programs > Administrative Tools > IIS

2. Click on the server name and double click Authentication

3. From here make sure that Anonymous Authentication is DISABLED and that Windows

Authentication is ENABLED (refer to page 6)


7/8


NB: Make sure that this is completed for the Default Web Site and ibmcognos web site

Step 3:

Configure Internet Explorer add the FQDN servername to Trusted Sites

1. Open IE > Tools > Options

2. Open Security > Trusted Sites > Sites

3. Add the FQDN servername as below:


8/8


Step 4:

Configure Internet Explorer Customer Level for Local intranet and Trusted sites

1. Open IE > Tools > Options

2. Click on the Security > Local intranet

3. Select Custom Level4. Scroll down and underneath Security select Automatic logon with username and password

as below:

5. Repeat for Trusted sites

cognos controller - active directory and single sign on

Documents