Integrated Login

Integrated Login enables you to use Microsoft Windows network authentication to control access to IBM® Cognos® TM1® data.

In this security model, you can use the ETLDAP utility (see Running ETLDAP) or other steps to move user and group Microsoft Windows login information into the Cognos TM1 database. Users who want to access Cognos TM1 data through Cognos TM1 clients must log in to Microsoft Windows first. After they successfully log in to Microsoft Windows, Cognos TM1 does not ask for log in information.

Integrated Login matches the domain-qualified name you use to log in to Microsoft Windows with a name in the UniqueID field of the }ClientProperties cube. If there is a match, Cognos TM1 allows you to log in.

As an example, suppose you log in with the user name Robert into the domain company.com. When you double-click a server in Server Explorer, Cognos TM1 looks in the }ClientProperties cube and examines the UniqueID field of that cube. Robert has a domain-qualified name of robert@company. As long as Robert logs in to the COMPANY domain with the name Robert, Integrated Login should work for this user.

If Integrated Login cannot match the domain-qualified name you use to log in to Microsoft Windows with a name in the UniqueID field of the }ClientProperties cube, Cognos TM1 displays an error message saying that the client name does not exist on the server.

Integrated Login is supported on Microsoft Windows only. You cannot use Integrated Login to access a UNIX version of the Cognos TM1 server .