IBM Business Analytics

 View Only
  • 1.  [Cognos 11.2.4] Problems with EntraID + Graphdatabase when User are member of 1000+ groups

    Posted Wed March 26, 2025 06:19 AM

    Hello Cognos fans,

    connected Cognos 11.2.4 on Linux to Microsoft EntraID and graphdatabase.

    If user logs in and is member of more then 1.000 groups, the graphdatabase says:

    {"error":{"code":"Request_BadRequest","message":"Number of included identifiers cannot exceed '1000'.","innerError":{"date":"2025-03-18T12:57:16","request-id":"xxx-76ca-4642-9e18-3daf1748de69","client-request-id":"xxx-76ca-4642-9e18-3daf1748de69"}}}

    We tried to add group claims in Azure - no success.

    Any idea how to configure a filter in Cognos to reduce the number of groups requested from graphdatabase?

    Hoping for your help :-)

    Wishing you a successful day.

    Ralf




    ------------------------------
    Ralf Roeber
    https://linkedin.com/in/ralf-roeber/
    ------------------------------


  • 2.  RE: [Cognos 11.2.4] Problems with EntraID + Graphdatabase when User are member of 1000+ groups

    Posted Thu March 27, 2025 04:53 AM

    Found a solution: 

    1: add relevant groups to your application in EntraID azure portal

    2: then add a group claim that only selects relevant groups to your application

    More details: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fed-group-claims



    ------------------------------
    Ralf Roeber
    https://linkedin.com/in/ralf-roeber/
    ------------------------------



  • 3.  RE: [Cognos 11.2.4] Problems with EntraID + Graphdatabase when User are member of 1000+ groups

    Posted 3 days ago

    Be careful when changing things in your tenant of azure, as all valid token for scheduled jobs will be invalid after the change. So every user needs to log in and refresh credentials.
    So, better inform your user before hand about the (upcoming) change, if you have a lot of scheduled jobs.



    ------------------------------
    Ralf Roeber
    https://linkedin.com/in/ralf-roeber/
    ------------------------------