IBM Support

IBM Controller database connection - Integrated Authentication pre-requisites

Troubleshooting


Problem

SQL Server integrated authentication for IBM Controller database(s) is possible and supported starting with version 11.1.0.
This document describes the Microsoft SQL Server pre-requisites needed to make this configuration successful.
For instructions on how to configure IBM Controller with Integrated Authentication please refer to the IBM Documentation for the version you are using. 
There are many areas where integrated authentication security can be setup in IBM Controller.  Please find the documentation link for the main IBM Controller repository configuration below.  For the other areas, please access the appropriate section of the documentation (i.e. FAP classic and/or FAP Web configuration, ODBC connection etc.)
https://www.ibm.com/docs/en/controller/11.1.0?topic=computer-set-database-connection-properties-controller-data-source

Environment

IBM Controller version 11.1.0 and higher

Resolving The Problem

Create a login for the web tier user within the SQL Server instance hosted on the data tier.

  • Launch SQL Server Management Studio (SSMS)
  • Log in using a sysadmin user credentials
  • Execute the following scripts:
exec sp_grantlogin 'domainName\WebServerMachineName$';


exec sp_grantdbaccess 'domainName\WebServerMachineName$';
  • Refresh the Login folder within the server instance
image-20250923134512-2
  • Right-click on the newly created login and select "Properties"
  • Navigate to the "Server Roles" tab and assign the necessary permissions
    • note: IBM Controller database minimum permissions are: bulkadmin and public. 
image-20250923134638-3
  • Click "OK" to save the changes
Ensure that the newly created login has access to the IBM Controller database(s)
(There are multiple manners of doing the below steps.  This document includes one of them.)
  • Go to the database, expand Security and Users
  • Right click on the newly created user
  • Navigate to the "General" tab and enter the same information for User name, Login name and Default schema
    • domainName\WebServerMachineName$
     image-20250923140226-7
  • Navigate to the "Membership" tab and toggle db_owner
     image-20250923140246-8
  • Click OK

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSY853","label":"IBM Controller"},"ARM Category":[{"code":"a8m0z000000brYKAAY","label":"Controller-\u003EBA - Cognos Controller-\u003EInstallation"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.1.0;11.1.1"}]

Document Information

Modified date:
24 September 2025

UID

ibm17245843

Page Feedback