IBM Support

How to integrate FAP with Cognos 8 security (for example Active Directory)

Troubleshooting


Problem

Customer publishes data from Controller to TM1, via the Financial Analytics Publisher (FAP) functionality of Controller. User sees that the Controller user IDs (for example "ADM") are being correctly transferred across to the FAP cube. However, the user does NOT have the CAMUSER id (for example "mydomain\Administrator") being copied over for each user. How can they solve this?

Symptom

.

Resolving The Problem

Perform the following steps:

  1. Configure Controller to use Cognos 8 security (which should be pointing to your Active Directory)
  2. Enable 'Single Sign-on'
  3. Ensure that you are using TM1 9.5 (earlier versions of TM1 have some known limitations)
  4. Import the CAM users into TM1. TIP: This will involve modifying tm1s.cfg / TM1p.ini / FAPService.properties files
  5. Define a CAM user to Function as a TM1 Administrator
  6. Import CAM groups / users (via the client - add new clients menu)

IMPORTANT NOTE:
  • If using Controller 10.1 IF7 (10.1.387) or later, then you can take advantage of the new "automateCAMUsers=true" feature
  • This simplifies some of the user creation process

Afterwards, perform the FAP publish
  • You will find that it will now bring over the security for the CAM user *as well as* the standard Controller usernames/IDs
  • However, the security used will be based on the CAM ids (not the Controller usernames)

Steps:
Instructions for all of the above are inside the attached document "23f. Applying Cognos 8 Security to Controller 8.5.1 FAP - Proven Practice.pdf".
NOTE:
  • This is a simple document, designed for standard/basic Controller/BI needs/situations
  • Customers are free to use this document, but the author recommends that all steps are reviewed/implemented by an experienced Technical Consultant, to be sure that the settings are correct for their environment.
  • It is based on Controller 8.5.1. If using Controller 10.1 IF7 or later, then see separate Technote #1590666 for a method of simplifying some of the steps.

[{"Product":{"code":"SS9S6B","label":"IBM Cognos Controller"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Controller","Platform":[{"code":"PF033","label":"Windows"}],"Version":"8.5.1","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018

UID

swg21460537