Real SSO with TM1Web Kerberos/Integrated Login
-
- Posts: 9
- Joined: Thu Nov 06, 2014 11:09 am
- OLAP Product: TM1
- Version: 10.2.2
- Excel Version: 2010
Real SSO with TM1Web Kerberos/Integrated Login
Hello,
I am exploring the possibility to switch our TM1-Landscape to Integrated Login via Kerberos.
Up To now a lot of things work fine like SSO-"Fat Client"-Login.
Nevertheless there is one thing I do not get to work: Real SSO with browser to TM1.
If I type in my credentials and password into TM1Web, I can login via Kerberos.
But I do not find a way that the credentials/password gets automatically filled. Is this possible at all?
I am working with TM1 10.2.2 in a windows server/client-landscape with IE as browser.
Kindly regards
Peter
I am exploring the possibility to switch our TM1-Landscape to Integrated Login via Kerberos.
Up To now a lot of things work fine like SSO-"Fat Client"-Login.
Nevertheless there is one thing I do not get to work: Real SSO with browser to TM1.
If I type in my credentials and password into TM1Web, I can login via Kerberos.
But I do not find a way that the credentials/password gets automatically filled. Is this possible at all?
I am working with TM1 10.2.2 in a windows server/client-landscape with IE as browser.
Kindly regards
Peter
- gtonkin
- MVP
- Posts: 1199
- Joined: Thu May 06, 2010 3:03 pm
- OLAP Product: TM1
- Version: Latest and greatest
- Excel Version: Office 365 64-bit
- Location: JHB, South Africa
- Contact:
Re: Real SSO with TM1Web Kerberos/Integrated Login
I think the difference is that SSO is not the same as how you expect integrated login to function. SSO expects you to provide you username and password then authenticates it with the relevant server as configured in your Kerberos settings. AFAIK, after many hours fiddling and reading on IBM's various sites, 10.2.2 FP4 at least works like this.
Edit-forgot to add this link
Edit-forgot to add this link
- mattgoff
- MVP
- Posts: 516
- Joined: Fri May 16, 2008 1:37 pm
- OLAP Product: TM1
- Version: 10.2.2.6
- Excel Version: O365
- Location: Florida, USA
Re: Real SSO with TM1Web Kerberos/Integrated Login
Integrated login (i.e. credentials passed directly/automatically from the OS to TM1) was broken in TM1 Web when they transitioned from IIS to Tomcat, v10 IIRC. SSO still works everywhere, but as you note you have to re-enter credentials when using TM1 Web.
Matt
Matt
Please read and follow the Request for Assistance Guidelines. It helps us answer your question and saves everyone a lot of time.
-
- MVP
- Posts: 3654
- Joined: Fri Mar 13, 2009 11:14 am
- OLAP Product: TableManager1
- Version: PA 2.0.x
- Excel Version: Office 365
- Location: Switzerland
Re: Real SSO with TM1Web Kerberos/Integrated Login
It is possible in TM1 Web 10.2.2. I have seen it. Some hacking is necessary and needs to be re-done after each FP upgrade, but "click-through" login can be done.
Please place all requests for help in a public thread. I will not answer PMs requesting assistance.
-
- Posts: 78
- Joined: Tue Mar 18, 2014 8:02 am
- OLAP Product: TM1, Cognos Express
- Version: 10.2.2
- Excel Version: 2013
Re: Real SSO with TM1Web Kerberos/Integrated Login
Why not use CAM?
-
- Posts: 9
- Joined: Thu Nov 06, 2014 11:09 am
- OLAP Product: TM1
- Version: 10.2.2
- Excel Version: 2010
Re: Real SSO with TM1Web Kerberos/Integrated Login
Thanky you very much for your answers.
Can I use CAM in a TM1-only Environment? Or do I need "a full COGNOS BI"-environment?Why not use CAM?
-
- MVP
- Posts: 264
- Joined: Mon Nov 03, 2014 8:23 pm
- OLAP Product: TM1
- Version: 9.5.2 10.1 10.2 PA2
- Excel Version: 2016
Re: Real SSO with TM1Web Kerberos/Integrated Login
There's also this option - https://www.ibm.com/developerworks/comm ... .2.2%20FP2
-
- MVP
- Posts: 1815
- Joined: Mon Dec 05, 2011 11:51 am
- OLAP Product: Cognos TM1
- Version: PA2.0 and most of the old ones
- Excel Version: All of em
- Location: Manchester, United Kingdom
- Contact:
Re: Real SSO with TM1Web Kerberos/Integrated Login
I had a look at this a while ago but when I recently tried to find the tm1websso.zip file I couldn't find it on developerworks. Could someone more capable of navigating IBM sites point me in the right direction?BrianL wrote:There's also this option - https://www.ibm.com/developerworks/comm ... .2.2%20FP2
I was sure I had previously downloaded a copy but cant find it anywhere.
Declan Rodger
-
- MVP
- Posts: 264
- Joined: Mon Nov 03, 2014 8:23 pm
- OLAP Product: TM1
- Version: 9.5.2 10.1 10.2 PA2
- Excel Version: 2016
Re: Real SSO with TM1Web Kerberos/Integrated Login
If you click on the community name, you get taken to https://www.ibm.com/developerworks/comm ... dfff320fef
From there under the files section you can find the .zip file.
For convenience the direct link is https://www.ibm.com/developerworks/comm ... 1efa787d89
From there under the files section you can find the .zip file.
For convenience the direct link is https://www.ibm.com/developerworks/comm ... 1efa787d89
-
- MVP
- Posts: 1815
- Joined: Mon Dec 05, 2011 11:51 am
- OLAP Product: Cognos TM1
- Version: PA2.0 and most of the old ones
- Excel Version: All of em
- Location: Manchester, United Kingdom
- Contact:
Re: Real SSO with TM1Web Kerberos/Integrated Login
Thanks for that; I had expected it to be an attachment on the actual article like the debugger page for instance.
Appreciate the pointers as it will give me more of an idea for navigating it in the future.
Appreciate the pointers as it will give me more of an idea for navigating it in the future.
Declan Rodger
- gtonkin
- MVP
- Posts: 1199
- Joined: Thu May 06, 2010 3:03 pm
- OLAP Product: TM1
- Version: Latest and greatest
- Excel Version: Office 365 64-bit
- Location: JHB, South Africa
- Contact:
Re: Real SSO with TM1Web Kerberos/Integrated Login
Thanks guys-very useful feedback-appreciate the education.