Cognos Analytics

 View Only
  • 1.  Navigating Multi-Factor Authentication (IdP) namespace

    Posted 2 days ago

    We are currently trying to set-up Multi-Factor Authentication (idp) in Cognos. I was able to get the sign in to work, but the new users have no permissions. When I went to try to add the new IdP users to the Cognos roles to give the new users access, I am unable to navigate the namespace to pull users in. 

    Does anyone know how to add IdP users to Cognos roles? 

    Thanks, 



    ------------------------------
    Elizabeth Johnson
    ------------------------------


  • 2.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    IBM Champion
    Posted 2 days ago

    Is your user signed in to the provider used for the MFA users? If it's a different namespace, you will need to sign in twice - once to the "normal" authentication provider (which I'm assuming gives you your System Admin privileges), then without signing out, sign in a second time to the new MFA provider. You should then be able to navigate into the MFA namespace to allocate the users/groups to the Cognos roles.

    Cheers!

    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 3.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted 2 days ago

    When I tried to sign in I get the following error: AAA-AUT-0013 The user is already authenticated in all available namespaces.

    Is there any way to get around this? 

    Thanks, 



    ------------------------------
    Elizabeth Johnson
    ------------------------------



  • 4.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    IBM Champion
    Posted 2 days ago

    Can you confirm that you do have two separate namespaces (not just one)? If you do, I would try logging out, close your browser, clear the cache, then try logging in again to both namespaces.

    Cheers!

    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 5.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted 2 days ago

    I received the same error message after clearing the cache. The original name space was 'Active Directory' and the new one is 'IdP'. 



    ------------------------------
    Elizabeth Johnson
    ------------------------------



  • 6.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    IBM Champion
    Posted 2 days ago

    Interesting! What happens if you log in first to the IdP namespace, then try to log in afterwards to the Active Directory namespace? Do you see the same issue?

    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 7.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    IBM Champion
    Posted 2 days ago

    I saw your message in my inbox saying that logging in to the IdP namespace then the AD namespace worked - thanks for the update. Bizarrely, it won't allow me to reply to your message.

    I'm guessing you'll want to close off this thread now?

    Cheers!
    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 8.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted 2 days ago

    Restart the Cognos application and try again. We had a similar issue earlier, and it was resolved after the restart.



    ------------------------------
    Nabin Poudyal
    ------------------------------