IBM Support

Configure TM1 CAM Authentication using Cognos Analytics 11.0 with SSO

Question & Answer


This Technote explains steps required to configure TM1 for CAM authentication when Cognos Analytics 11.0 is configured with single sign on (SSO). The solution provided in this Technote applies to both TM1 10.2.2 and the TM1 component provided with Planning Analytics 2.0 Local. This configurion has been tested with Cognos Analytics 11.0.4, 11.0.5, and 11.0.6.


Part 1 - Verify the configuration of IIS for Cognos Analytics 11 with SSO

To configure the IIS gateway for Cognos Analytics 11 it's recommended to use the CA_IIS_config.bat script found here: This script will automatically complete the IIS configuration that is detailed here:

Take note of the alias name set in the CA_IIS_config.bat file before the script is run.

In addition to the CA_IIS_config.bat the following items should also verified.

1 - The URLs in Cognos Configuration for Cognos Analtyics 11 use the fully qualified domain name (FQDN).

2 - The Gateway URL in Cognos Configuration for Cognos Analytics is configured as follows ( is the FQDN for the Cognos Analytics gateway server and <alias name> is the alias that was set in CA_IIS_config.bat before running the script.<alias name>/bi/v1/disp

3 - Examine the .\<cognos analytics 11>\webcontent\default.htm and .\<cognos analytics 11>\webcontent\index.html file. Update the line starting with <meta http-equiv="refresh" as follows (where <alias name> is the alias used in the CA_IIS_config.bat script file).

<meta http-equiv="refresh" content="0; URL=/<alias name>/bi/">

Part 2 - Configure the TM1 Server for CAM Authentication

The tm1s.cfg file should be configured with the following parameters.

ClientCAMURI=<alias name>/bi/v1/disp

Note that on a single server Cognos Analytics 11 install and would be the same system.

As of Planning Analtyics 2.0 Local it's no longer required to restart the TM1 Server after making changes to the IntegratedSecurityMode, ClientCAMURI, or ServerCAMURI parameters.

At this point TM1 Architect and Perspective should be able to connect to the TM1 model using CAM authentication with SSO.

Part 3 - Configure CAM Authentication for TM1Web, pmpsvc, and pmhub

The configuration for CAM Authentication with TM1Web can be found here:

The configuration for CAM Authentication with pmpsvc can be found here:

The configuration for CAM Authentication with pmhub can be found here:

The following Technote provides additional details of the CAM authentication configuration for TM1Web, pmpsvc, and pmhub:

In addition to steps in the above documentation, the planning.html, pmhub.html and tm1 directory (from the BI interoperability files) must be copied in the <Cognos Analytics 11>/webcontent/bi/ directory in the Cognos Analytics 11 gateway installation.

[{"Product":{"code":"SSCTEW","label":"IBM Planning Analytics Local"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Planning Analytics v2.0 - TM1 Server","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"2.0.1;2.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018