Planning Analytics

 View Only

Multi-Factor Authentication with Planning Analytics on Cloud

By SAMI EL CHEIKH posted Thu December 01, 2022 11:41 AM

  

Update February 17,2023: 
We will be enabling Multi-factor Authentication for all applicable customers on March 8,2023. Please note that once enabled your product experience may be briefly interrupted and require evidence set up for multi factor authentication before continued use. See below for more information.

________________________________________________________________________________________________

In keeping with our commitment to comprehensive security at IBM, we will be launching Multi-factor Authentication (MFA) for all authorized users of IBM Planning Analytics on Cloud in Q1 2023. You can expect an update to this blog at least 2 weeks in advance of our implementation date. In anticipation of this initiative, we wanted to cover some of the expected workflows around authentication.

MFA (sometimes referred to as two-factor authentication) involves security measures that prohibits a user from logging into an application or website without providing two or more pieces of evidence regarding their identity. Common pieces of evidence include a PIN (Personal Identification Number), an authenticator application, cellular text, and even facial recognition.

Who will be impacted when MFA is enabled? 

Multi-factor Authentication will be enabled by IBM for all non-federated cloud customers using IBMid for authentication. 


This includes clients using IBM Planning Analytics on Cloud and those that integrated IBM Cognos Controller with their IBM Planning Analytics on Cloud environment  as well as Cognos Analytics on Cloud Hosted environment integrated with PA on Cloud (CA-PA SSO namespace using IBMid authentication). 

The login screen for these users looks similar to the following image:

Federated customers utilize a custom sign-on solution to grant access across domains. The login screen you will see in this case will be specific to the authentication technology deployed in your organization. Popular federated login providers include Okta and Microsoft Azure AD. 


Setting up Multi-factor Authentication is not required with a federated login to Planning Analytics on Cloud but may be configured through a federated authentication solution.


For more information on federate login please review the following documentation: 
https://ibm.box.com/v/IBMid-Federation-Guide

How does MFA affect my product experience?

Configuring MFA for use with IBM Planning Analytics on Cloud:

  1. You will first have to set up your evidence upon login in Planning Analytics Workspace. If your organization has not federated their login experience and are using IBMid for authentication, you will first see the normal login screen below. Every end user account will need to perform this one-time setup. 

    Note: IBM only supports setting up your evidence by logging into Planning Analytics Workspace. Older releases of certain components such as Perspectives and TM1Web may not support the MFA set-up experience due to architectural dependencies that may result in errors.


  1. You will then be prompted with a new screen to set up additional evidence for login. The three available options are Email, the IBM Verify App and an Authenticator App. Select the applicable choice(s) and proceed to set up your evidence.


Logging into IBM Planning Analytics on Cloud with MFA:

  1. Once MFA is set up for your account, you will be requested to provide this evidence on future logins to the various Planning Analytics components including Planning Analytics Workspace, Planning Analytics for Excel, TM1 Architect and TM1 Perspectives. This could be initiated by several factors such as changing devices and browsers.

  1. Once authenticated you will be re-directed to the appropriate Planning analytics with Watson component.

 Example 1: Logging in though TM1 Architect

Example 2: Logging in though Planning Analytics for Excel

 

How do I get support if I'm having issues?

For more information, please contact IBM support at:
https://www.ibm.com/mysupport/s/?language=en_US

 


#PlanningAnalyticswithWatson

0 comments
75 views

Permalink