Symantec Access Management

Expand all | Collapse all

siteminder integration with cognos

  • 1.  siteminder integration with cognos

    Posted 09-23-2015 06:28 AM

    Hello ,

                we have installed site minder web agent on cognos webserver and configured webagent.conf

     

    HostConfigFile="XXXX\smhost.conf"

    AgentConfigObject="XXXXXXX.agentconf"

    EnableWebAgent="YES"

    provided by siteminder team.

     

    the response we are getting from siteminder is not passing to cognos .

    I have tried changing few parameter values

    setremoteuser ="YES"

    remoteuserval ="SM_USER"

    but no success. Could you help me what are the parameters to be set for Microsoft Active directory.

    Many thanks

    Nischal.



  • 2.  Re: siteminder integration with cognos

    Broadcom Employee
    Posted 09-25-2015 02:48 AM

    Hi Nischal,

     

    You might also refer to IBM about the Cognos Integration Documentation.

    In the past IBM produced integration documentation with a title like :

     

      Integrating IBM Cognos with CA SiteMinder

     

    Please check with the vendor for such documentation. It might help you

    to configure finer this integration.

     

    ie.: http://www.ibm.com/developerworks/data/library/cognos/page448.html

     

    Best Regards,

    Patrick



  • 3.  Re: siteminder integration with cognos

    Posted 09-24-2015 02:10 AM

    Hi Nischal,

     

    It doesn't seem Siteminder support cognos web server.

    Have you checked the platform support matrix?

    SAP Portal Services

     

    By default, SM set some default headers ie:

    HTTP_SM_USER

    HTTP_SM_USERDN

    HTTP_SM_UNIVERSALID

     

    Are you able to see those when you dump the headers in asp/jsp pages?

     

    Regards,

    Kar Meng



  • 4.  Re: siteminder integration with cognos

    Broadcom Employee
    Posted 09-24-2015 10:26 AM

    I have successfully integrated with SiteMinder with Cognos.  You must use the REMOTE_USER header so setremoteuser must be yes.  Check your IgnoreExt.  Make sure that .dll is not one of the extensions being ignored.  This will prevent Cognos from seeing the headers.



  • 5.  Re: siteminder integration with cognos

    Posted 09-24-2015 02:42 AM

    Hi Karmeng,

                Iam sorry should have specified .. Cognos is an application and using IIS as web server .

    no , I am not able to see any information in header , but I am getting SMsession cookie from policy server .



  • 6.  Re: siteminder integration with cognos

    Posted 12-17-2018 03:16 PM

    Do you have any resources on how to set up and configure SSO with Cognos as I am unable to find any documentation on the process.



  • 7.  Re: siteminder integration with cognos

    Broadcom Employee


  • 8.  Re: siteminder integration with cognos

    Posted 01-07-2019 09:42 AM

    Do you know if there needs to be any extra web agent installation packages installed such as the SDK in order to make the connection between IBM Cognos and the policy server work? We have the namespaces configured but when a connection is tested this error continues to occur.

    I have verified the agent name and that it is in 4.x mode as well as the shared secret on both sides. Does an ACO need to be configured for this agent even though there is no way to configure where to point the agent to the ACO in the policy server? Unless I am missing this portion of where to do this in the configuration documents?



  • 9.  RE: Re: siteminder integration with cognos

    Posted 5 days ago
    Hi,

    Was there an update on the message above we are receiving similar CAM and SiteMinder errors.


  • 10.  RE: Re: siteminder integration with cognos

    Broadcom Employee
    Posted 4 days ago
    The solution is likely in the IBM Cognos side configuration.
    It is possible policy server is using FIPS only mode. If that is true, Cognos's side agent MUST register and connect using FIPS only mode. Otherwise it will not connect.
    Here is the update from customer windows admin with the work done on the IIS and windows box in order to accept and setup the SSO -> cognos integration.
    - Configured Cognos IIS
    - Registered Siteminder agent
    - Added Windows authentication feature
    - Added Windows environment variable used to accept FIPS Only.

    How to identify if SiteMinder is on FIPS only mode?
    https://knowledge.broadcom.com/external/article?articleId=224434