Cognos Analytics

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Patrick, my guess is it is missing password grant type. I don't see that mentioned in the documentation for setting it up so not quite sure how to allow it in Azure. This is required where applications expect to interact with the OpenID endpoint on behalf of the user for such things as SDK authentication, which I believe schedules do. I know that OKTA refers to it as resource owner password credentials (aka. ROPC). A bit ago, while helping a customer set up their OKTA integration, they couldn't test the name space properly in configuration either without this grant type allowed.

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Hi Robert,

Thank you for this useful answer. I will share this information with my customer.

Best regards,

------------------------------
Patrick Neveu
Positive Thinking Company
IBM Champion

Original Message:
Sent: Mon August 07, 2023 10:10 AM
From: Robert Hofstetter
Subject: CA v11.1.7 with AzureAD : unable to renew credentials and unable to run scheduled reports

Patrick, my guess is it is missing password grant type. I don't see that mentioned in the documentation for setting it up so not quite sure how to allow it in Azure. This is required where applications expect to interact with the OpenID endpoint on behalf of the user for such things as SDK authentication, which I believe schedules do. I know that OKTA refers to it as resource owner password credentials (aka. ROPC). A bit ago, while helping a customer set up their OKTA integration, they couldn't test the name space properly in configuration either without this grant type allowed.

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Hi Amy,

I am using OIDC with AzureAD as provider type. In this case, I believe there is no such Scheduling credentials option.

Please correct me if I am wrong.

Best regards,

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

We are also using OIDC with AzureAD and MFA.  It took us forever to get the settings correct.  I'm unable to upload our settings here so I will try to email you a word doc.

Hi Amy,

I am using OIDC with AzureAD as provider type. In this case, I believe there is no such Scheduling credentials option.

Please correct me if I am wrong.

Best regards,

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Hi Amy,

Thank you for your nice message. I would love to receive your documentation.

Best regards,

We are also using OIDC with AzureAD and MFA.  It took us forever to get the settings correct.  I'm unable to upload our settings here so I will try to email you a word doc.

Hi Amy,

I am using OIDC with AzureAD as provider type. In this case, I believe there is no such Scheduling credentials option.

Please correct me if I am wrong.

Best regards,

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

We are also using OIDC with AzureAD and MFA.  It took us forever to get the settings correct.  I'm unable to upload our settings here so I will try to email you a word doc.

Hi Amy,

I am using OIDC with AzureAD as provider type. In this case, I believe there is no such Scheduling credentials option.

Please correct me if I am wrong.

Best regards,

------------------------------
Patrick Neveu
Positive Thinking Company
IBM Champion

Original Message:
Sent: Tue August 08, 2023 11:12 AM
From: Amy Rivito
Subject: CA v11.1.7 with AzureAD : unable to renew credentials and unable to run scheduled reports

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

We are also using OIDC with AzureAD and MFA.  It took us forever to get the settings correct.  I'm unable to upload our settings here so I will try to email you a word doc.

Hi Amy,

I am using OIDC with AzureAD as provider type. In this case, I believe there is no such Scheduling credentials option.

Please correct me if I am wrong.

Best regards,

------------------------------
Patrick Neveu
Positive Thinking Company
IBM Champion

Original Message:
Sent: Tue August 08, 2023 11:12 AM
From: Amy Rivito
Subject: CA v11.1.7 with AzureAD : unable to renew credentials and unable to run scheduled reports

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Hi Amy,

I am using OIDC with AzureAD as provider type. In this case, I believe there is no such Scheduling credentials option.

Please correct me if I am wrong.

Best regards,

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages:

Amy,

I've checked and I don't have Scheduling Credentials in Cognos Configuration.

Best regards,

Try changing the Strategy setting under Scheduling credentials in Cognos Configuration to ID Token Only

Hi,

This is a Cognos Analytics v11.1.7 server with AzureAD. In Cognos Configuration, there is no advanced parameters used.

Users can access to the reports and run non-scheduled reports.

They can't renew credentials (Authentication is not possible). They cannot run scheduled reports/jobs (it is also true with samples reports, same issue).

In the log files (cognosserver.log and cognosserver-session-<number>.log, I have the following error messages: