Setting the cookieSameSite attribute

Configure the Configuration.cookieSameSite attribute to prevent cross-domain errors in your Cognos environment.

To prevent cross-site request forgery (CSRF) attacks, some browsers may return error messages if HTML files containing iFrames are hosted in a different domain than the report server. To avoid these errors, you can configure the Configuration.cookieSameSite advanced setting.

If you are embedding a Cognos Analytics dashboard in a Microsoft Teams environment, you must set this attribute. For more information, see Embedding a dashboard in Microsoft Teams.

Before you begin

The following configuration must be in place:

Important: You must enable SSL access before you set Configuration.cookieSameSite=None. Otherwise all users, including administrators, will be locked out of Cognos Analytics.

Procedure

  1. Click Manage > Configuration > System, and select Advanced Settings.
  2. In the Key field, type the following: 
    Configuration.cookieSameSite
  3. Type None in the Value field.
  4. Click Apply.
  5. Refresh your browser window.

Results

Applications in your Cognos environment with a different domain no longer produce error messages.