Cognos Analytics

Cognos Analytics

Connect, learn, and share with thousands of IBM Cognos Analytics users! 

 View Only
  • 1.  Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 09:14 AM

    We are currently trying to set-up Multi-Factor Authentication (idp) in Cognos. I was able to get the sign in to work, but the new users have no permissions. When I went to try to add the new IdP users to the Cognos roles to give the new users access, I am unable to navigate the namespace to pull users in. 

    Does anyone know how to add IdP users to Cognos roles? 

    Thanks, 



    ------------------------------
    Elizabeth Johnson
    ------------------------------


  • 2.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 09:39 AM

    Is your user signed in to the provider used for the MFA users? If it's a different namespace, you will need to sign in twice - once to the "normal" authentication provider (which I'm assuming gives you your System Admin privileges), then without signing out, sign in a second time to the new MFA provider. You should then be able to navigate into the MFA namespace to allocate the users/groups to the Cognos roles.

    Cheers!

    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 3.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 09:58 AM

    When I tried to sign in I get the following error: AAA-AUT-0013 The user is already authenticated in all available namespaces.

    Is there any way to get around this? 

    Thanks, 



    ------------------------------
    Elizabeth Johnson
    ------------------------------



  • 4.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 10:03 AM

    Can you confirm that you do have two separate namespaces (not just one)? If you do, I would try logging out, close your browser, clear the cache, then try logging in again to both namespaces.

    Cheers!

    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 5.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 10:56 AM

    I received the same error message after clearing the cache. The original name space was 'Active Directory' and the new one is 'IdP'. 



    ------------------------------
    Elizabeth Johnson
    ------------------------------



  • 6.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 11:02 AM

    Interesting! What happens if you log in first to the IdP namespace, then try to log in afterwards to the Active Directory namespace? Do you see the same issue?

    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 7.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 01:17 PM

    I saw your message in my inbox saying that logging in to the IdP namespace then the AD namespace worked - thanks for the update. Bizarrely, it won't allow me to reply to your message.

    I'm guessing you'll want to close off this thread now?

    Cheers!
    MF.



    ------------------------------
    Mark Fry
    Technical Consultant
    ------------------------------



  • 8.  RE: Navigating Multi-Factor Authentication (IdP) namespace

    Posted Wed July 03, 2024 01:58 PM

    Restart the Cognos application and try again. We had a similar issue earlier, and it was resolved after the restart.



    ------------------------------
    Nabin Poudyal
    ------------------------------