PI94721: UNABLE TO AUTHENTICATE ERROR WHEN RENEWING CREDENTIALS AND CREATING A SCHEDULE CHALLENGES FOR LOGIN, WITH IBMID AS NAMESPACE.

APAR status

• Closed as documentation error.

Error description

• Unable to Authenticate error when renewing credentials and
  creating a schedule challenges for login, when IBMid is your
  namespace.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Cognos Analytics                                             *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Unable to Authenticate error when renewing credentials.      *
  * Creating a schedule challenges for login, when IBMid is your *
  * namespace.                                                   *
  *                                                              *
  * 1. Configure a Cognos Analytics environment with a BlueID    *
  * Namespace                                                    *
  *     Details on configuring BlueID can be found in the        *
  * following link:                                              *
  *                                                              *
  * https://www.ibm.com/support/knowledgecenter/SSEP7J_11.0.0/co *
  * m.ibm.swg.ba.cognos.inst_cr_winux.doc/t_openid_namespace.htm *
  * l                                                            *
  * 2. Make sure that the "Everyone" role is added to at least   *
  * on Cognos Group.                                             *
  *                                                              *
  * 3. Attempt to create a schedule or renew the credentials     *
  * once you are logged in.                                      *
  *                                                              *
  * Error in logs.                                               *
  * Call to IdP failed to get identity. Status 400               *
  * Dumping stack trace:                                         *
  * 2018-02-23T16:06:50.537-0500    ERROR                        *
  * com.ibm.cogno.camaa.inter.OIDC.provi.OIDCComms    ÝDefault   *
  * Executor-thread-297¨                NA                       *
  * com.ibm.cognos.camaaa.internal.OIDC.provider.OIDCComms.getTo *
  * kenEndpointRespFromUsernamePassword                          *
  *                                                              *
  *                                                              *
  * See Collaboration 128475 for further details, logs,          *
  * cmplst.txt and work-around.                                  *
  * https://bajazz04.rtp.raleigh.ibm.com:9725/ccm/web/projects/B *
  * usiness%20Intelligence%20and%20Predictive#action=com.ibm.tea *
  * m.workitem.viewWorkItem&id=128475                            *
  *                                                              *
  *                                                              *
  * This can be reproduced in CA 11.0.8 and CA 11.0.9            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Updated Knowledge Center at
  https://www.ibm.com/support/knowledgecenter/SSEP7J_11.1.0/com.ib
  m.swg.ba.cognos.inst_cr_winux.doc/c_generic_oidc_type.html
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels