CAM Authentication

You can configure IBM® Controller Web to log on with Cognos Access Management (CAM) authentication.

Before you begin

You must configure IBM Cognos BI to not allow for anonymous authentication. You must also specify the Controller Web settings.


  1. In the Cognos BI installation folder, <BI_installation_folder>/templates/ps/portal/, create a file with the name variables_CCRWeb.xml.
  2. The content of the file variables_CCRWeb.xml must be as follows:
    <CRNenv c_cmd="http://{host_name}:{port_number}/#!/CamLogin">
          <param name="cam_passport"/>
  3. Locate the file in the C:\Program Files\IBM\cognos\ccr_64\fcmweb\wlp\usr\servers\fcm.web folder.
  4. Open the file and set the following properties:
    1. biUrl: the URL that the user must go to when CAM authentication is needed. The default location is http://$<BI_host>:80/ibmcognos/cgi-bin/cognos.cgi. This property is only valid for CAM login mode.
    2. biDispatchEndpoint: the endpoint to which Controller Web connects to validate CAM users and CAM passports. The default location is http://$<BI_host>:9300/p2pd/servlet/dispatch. This property is only valid for CAM login mode.
    3. loginMode: the authentication type. The accepted values are: CAM and NATIVE.