siteminder integration with cognos

[Anon Anon]

Hello ,

            we have installed site minder web agent on cognos webserver and configured webagent.conf

 

HostConfigFile="XXXX\smhost.conf"

AgentConfigObject="XXXXXXX.agentconf"

EnableWebAgent="YES"

provided by siteminder team.

 

the response we are getting from siteminder is not passing to cognos .

I have tried changing few parameter values

setremoteuser ="YES"

remoteuserval ="SM_USER"

but no success. Could you help me what are the parameters to be set for Microsoft Active directory.

Many thanks

Nischal.

[Karmeng]

Hi Nischal,

 

It doesn't seem Siteminder support cognos web server.

Have you checked the platform support matrix?

SAP Portal Services

 

By default, SM set some default headers ie:

HTTP_SM_USER

HTTP_SM_USERDN

HTTP_SM_UNIVERSALID

 

Are you able to see those when you dump the headers in asp/jsp pages?

 

Regards,

Kar Meng

[Anon Anon]

Hi Karmeng,

            Iam sorry should have specified .. Cognos is an application and using IIS as web server .

no , I am not able to see any information in header , but I am getting SMsession cookie from policy server .

[Legacy User]

I have successfully integrated with SiteMinder with Cognos.  You must use the REMOTE_USER header so setremoteuser must be yes.  Check your IgnoreExt.  Make sure that .dll is not one of the extensions being ignored.  This will prevent Cognos from seeing the headers.

[Taylor Swanson]

Do you have any resources on how to set up and configure SSO with Cognos as I am unable to find any documentation on the process.

[Ashok kumar Muthu]

Believe this is what you are looking for !!!

 

ftp://public.dhe.ibm.com/software/dw/dm/cognos/security/general/integrating_ibm_cognos8_with_ca_siteminder.pdf

 

IBM Knowledge Center 

[Taylor Swanson]

Do you know if there needs to be any extra web agent installation packages installed such as the SDK in order to make the connection between IBM Cognos and the policy server work? We have the namespaces configured but when a connection is tested this error continues to occur.

I have verified the agent name and that it is in 4.x mode as well as the shared secret on both sides. Does an ACO need to be configured for this agent even though there is no way to configure where to point the agent to the ACO in the policy server? Unless I am missing this portion of where to do this in the configuration documents?

[Hamisha Patel]

Hi,

Was there an update on the message above we are receiving similar CAM and SiteMinder errors.

[Hongxu Liu]

The solution is likely in the IBM Cognos side configuration.
It is possible policy server is using FIPS only mode. If that is true, Cognos's side agent MUST register and connect using FIPS only mode. Otherwise it will not connect.
Here is the update from customer windows admin with the work done on the IIS and windows box in order to accept and setup the SSO -> cognos integration.
- Configured Cognos IIS
- Registered Siteminder agent
- Added Windows authentication feature
- Added Windows environment variable used to accept FIPS Only.

How to identify if SiteMinder is on FIPS only mode?
https://knowledge.broadcom.com/external/article?articleId=224434

[Patrick Dussault]

Hi Nischal,

 

You might also refer to IBM about the Cognos Integration Documentation.

In the past IBM produced integration documentation with a title like :

 

  Integrating IBM Cognos with CA SiteMinder

 

Please check with the vendor for such documentation. It might help you

to configure finer this integration.

 

ie.: http://www.ibm.com/developerworks/data/library/cognos/page448.html

 

Best Regards,

Patrick

[Marcos Prado]

Hello Nischal,

In my organisation we decided to use OpenID Connect to create the SSO with cognos and it worked as a charm.
The team responsbile for cognos said it was way easier to use it instead of the standard agent configuration (http headers and all ...)

Regards