If you use CA SiteMinder to provide single signon
in your security infrastructure, you can also use it for single signon
with WebCenter Interaction Portal.
You must configure
a CA SiteMinder authentication namespace in IBM® Cognos® BI.
WebCenter Interaction Portal sends the CA SiteMinder active authentication
token to the remote server, which sends the token to the IBM Cognos gateway.
Procedure
- In IBM Cognos Configuration, configure a CA SiteMinder
authentication namespace.
For
instructions, see the topic about configuring CA SiteMinder authentication
namespaces in the Installation and Configuration Guide.
- Configure the remote server to forward the authentication
token:
- Edit the cpsalui.properties file in the c10_location/cps/oracle/webapps/gadgets/WEB-INF/classes directory.
- Change the forward_cookies property to include
the name of the active authentication token that CA SiteMinder provides.
- Change the cps_endpoint property to indicate
the URL of the gateway.
For a CGI gateway, you can use the default
setting if the gateway and the remote server are on the same computer.
Otherwise, replace the localhost portion with host_name:port.
For
a servlet or ISAPI gateway, replace the localhost/ibmcognos/cgi-bin/cognos.cgi portion
with the values to target the gateway.
For example,
http://host_name:port/ibmcognos/cgi-bin/cognosisapi.dll/wsrp/cps4/portlets/[package]?wsdl&b_action=cps.wsdl
- Change the cps_auth_namespace property to
the namespace that you want to use for authentication.