IBM Support

403 (Forbidden) is returned when accessing Cognos Analytics via SSO and a WebSeal Junction.

Troubleshooting


Problem

When attempting to access Cognos Analytics via SSO, through a Webseal junction a 403 error message is returned.

Symptom

403 response is returned for a URL that passes through Webseal to Cognos Analytics.

An example from the Webseal pdweb debug (but Fiddler or the Browser's Developer Tools should show the same response):

Request:

GET /ibmcognos/bi/v1/configuration/keys/Glass/installMode HTTP/1.1
accept: */*
accept-language: en-US
connection: close
content-type: application/json; charset=utf-8
host: <cognos webserver>
iv-user: <some user>
referer: <external junction URL>/ibmcognos/bi/
user-agent: <user agent>
via: HTTP/1.1 <external URL>:443
iv_server_name: <server>
x-requested-with: XMLHttpRequest
Cookie: cookieEnabledPersist=true; cookieEnabledSession=true; <cookie_name>=<value>; <cookie_name>=<value>; IV_JCT=%2Fibmcognos; XSRF-TOKEN=<xsrf-token-value>

Response:

HTTP/1.1 403 Forbidden
connection: close
content-language: en-US
date: Tue, 31 Jul 2018 16:36:57 GMT
cache-control: must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-powered-by: Servlet/3.1
x-bi-xsrf: Rejected
x-ca-affinity: <value> 
 

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}},{"Product":{"code":"SS6G84","label":"IBM Cognos Analytics on Cloud"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
01 May 2025

UID

ibm10725451

Page Feedback