Hello everyone,

is it possible to authenticate in planning analytics with OpenID Connect (OIDC) on a TM1 database?

There is the following parameter in the Planning Analytics database configuration: SupportOpenConnect.

But I can't find any further information or installation instructions. Are there any instructions?

Best regards
Patrick Lindemann

Hello Patrick,

PA does not natively support OpenID for authentication. However, it does support other modern authentication methods, such as OAuth 2.0 and SAML, which are often used with Single Sign-On (SSO) systems.
To use  OpenID in an environment with PA, you would typically integrate it with a federated identity management system (such as IBM Security Access Manager, Okta, or another SSO provider) that can bridge OpenID and SAML or OAuth. These identity providers can authenticate users via OpenID and then pass the authentication token to PA via SAML or OAuth.
So PA does not directly support OpenID, but it can work within systems that use OpenID by integrating with other supported protocols through SSO solutions.

See: https://www.ibm.com/docs/en/cognos-analytics/12.0.0?topic=providers-openid-connect-authentication-provider

In addition to Wim's message, you can checkout Cognos as Authentication Provider. It will take over the communication with OIDC. In TM1 you will then use securitymode 5.