Configuring IBM Cognos BI for single sign-on with federated repositories

To use an existing IBM® Cognos® Business Intelligence installation with a WebSphere® Application Server that is using federated repositories (also known as Virtual Member Manager (VMM)), you must perform additional configuration steps to add the VMM authentication provider.

To configure the existing IBM Cognos BI service for single sign-on with IBM Business Monitor, complete the following steps:

1. Move the monAuthProvider.jar file from the app_server_root/installableApps.wbm directory on the IBM Business Monitor server to the Cognos_install_root/webapps/p2pd/WEB-INF/lib directory on the IBM Cognos BI server.
2. Regenerate and redeploy the IBM Cognos BI EAR file using the IBM Cognos BI configuration. See the IBM Cognos BI Installation and Configuration Guide.
3. In the IBM Cognos BI configuration, add a custom authorization provider by following these steps:
   1. Open the Cognos BI configuration.
   2. Right click Security > Authentication > New resource > namespace.
   3. Specify a name for the namespace.
   4. For type, select Custom java provider.
   5. In the namespace ID field, enter WBM_Provider.
   6. Make sure the Selectable for authentication? field is set to true.
   7. Set the Java class name to the same value as the Java class name in the VMMAuth namespace.
   8. Save your changes.
   9. Stop and restart WebSphere Application Server for these changes to take effect.
4. You can have only one provider selected for authentication. If you were using another provider that enables you to turn it off, select the other provider in the IBM Cognos BI configuration. In the Selectable for authentication? field, select false.
5. Exchange lightweight third party authentication (LTPA) keys between the IBM Business Monitor server and the IBM Cognos BI server. See Sharing LTPA keys.
6. Exchange SSL certificates between the IBM Business Monitor server and the IBM Cognos BI server. See Configuring server-to-server SSL in multiple-cell environments.