Cognos Analytics

Cognos Analytics

Connect, learn, and share with thousands of IBM Cognos Analytics users! 

 View Only

  • 1.  Call to IdP failed to get identity. Status 401 error when using OIDC-proxy calling target namespace CJAP

    Posted Wed August 21, 2019 02:17 PM
    We are able to authenticate using OIDC Azure AD. But to handle Authorization we have CJAP in place so we thought to use OIDC-Proxy so that we can pass REMOTE_USER to CJAP and handle Authorization. but we are getting error as below errors


    2019-08-16T19:18:20.094+0530 DEBUG com.ibm.cognos.camaaa.internal.OIDC.provider.OIDCTrustedSignonProxy [Default Executor-thread-28] 22C9C2qh94yhhwhCh98CsGhyGMGvqd92j8yww9v2 jddlywCdqMCGj299qyqqhhCM9lqwM8qsdqy4Ch9w Mhdl8q48hCvjqjl9lw8w9MvC2sMvqv998Gvhd9wq NA 172.30.18.209 57375 NA IBM Cognos 8220 Code not found... about to redirect2019-08-16T19:18:20.094+0530 DEBUG com.ibm.cognos.camaaa.internal.OIDC.provider.OIDCTrustedSignonProxy [Default Executor-thread-28] 22C9C2qh94yhhwhCh98CsGhyGMGvqd92j8yww9v2 jddlywCdqMCGj299qyqqhhCM9lqwM8qsdqy4Ch9w Mhdl8q48hCvjqjl9lw8w9MvC2sMvqv998Gvhd9wq NA 172.30.18.209 57375 NA IBM Cognos 8220 Code not found... about to redirect2019-08-16T19:18:46.747+0530 DEBUG com.ibm.cognos.camaaa.internal.OIDC.provider.LogonUtils [Default Executor-thread-144] vwC4CGsl4vl8q9sq884Cj2v2CM8M49dwyjydG299 4CGyyhqs9qsv2yjjwwjysjd9h9dCdGdqh2v24dh8 MhMwwql2vs8shy99GwjqylsvwydhwwdGM44Cwlq9 NA 172.30.18.209 57418 NA IBM Cognos 8220 Found autorization code for OIDC provider... attempting to logon2019-08-16T19:18:47.608+0530 ERROR com.ibm.cognos.camaaa.internal.OIDC.provider.OIDCComms [Default Executor-thread-144] vwC4CGsl4vl8q9sq884Cj2v2CM8M49dwyjydG299 4CGyyhqs9qsv2yjjwwjysjd9h9dCdGdqh2v24dh8 MhMwwql2vs8shy99GwjqylsvwydhwwdGM44Cwlq9 NA 172.30.18.209 57418 NA IBM Cognos 8220 Call to IdP failed to get identity. Status 401

    Any one please respond whether it works or supported or not?

    ------------------------------
    srilakshmi devarapalli
    ------------------------------

    #CognosAnalyticswithWatson


  • 2.  RE: Call to IdP failed to get identity. Status 401 error when using OIDC-proxy calling target namespace CJAP

    Posted Mon August 26, 2019 09:09 AM
    Hello, 

    Please ensure you are on a CA version of 11.0.9 or higher and follow these instructions
    https://community.ibm.com/community/user/businessanalytics/blogs/antonio-marziano/2018/09/05/administration-how-to-setup-azure-oidc-with-cognos

    If you are still running into issues enable logging and open a support ticket to better help you.
    https://community.ibm.com/community/user/businessanalytics/blogs/archive-user/2017/08/31/how-to-use-logging-in-cognos-analytics-1107

    ------------------------------
    Adebimpe Adefowora
    IBM
    Ottawa Canada
    ------------------------------

    Original Message