Enable Single Signon for Oracle WebCenter Interaction Portal Using CA SiteMinder

If you use CA SiteMinder to provide single signon in your security infrastructure, you can also use it for single signon with WebCenter Interaction Portal.

You must configure a CA SiteMinder authentication namespace in IBM® Cognos® BI. WebCenter Interaction Portal sends the CA SiteMinder active authentication token to the remote server, which sends the token to the IBM Cognos gateway.

Procedure

  1. In IBM Cognos Configuration, configure a CA SiteMinder authentication namespace.

    For instructions, see the topic about configuring CA SiteMinder authentication namespaces in the Installation and Configuration Guide.

  2. Configure the remote server to forward the authentication token:
    • Edit the cpsalui.properties file in the c10_location/cps/oracle/webapps/gadgets/WEB-INF/classes directory.
    • Change the forward_cookies property to include the name of the active authentication token that CA SiteMinder provides.
    • Change the cps_endpoint property to indicate the URL of the gateway.

      For a CGI gateway, you can use the default setting if the gateway and the remote server are on the same computer. Otherwise, replace the localhost portion with host_name:port.

      For a servlet or ISAPI gateway, replace the localhost/ibmcognos/cgi-bin/cognos.cgi portion with the values to target the gateway.

      For example,

      http://host_name:port/ibmcognos/cgi-bin/cognosisapi.dll/wsrp/cps4/portlets/[package]?wsdl&b_action=cps.wsdl

    • Change the cps_auth_namespace property to the namespace that you want to use for authentication.