IBM Business Analytics

Good morning,

after updating to the Cognos 12.0 we faced the problem that the login process is taking much longer than before. We are using an on premise installation with SSO on a on premise AD. There was no change on our side on this config.

The sign in process is taking much more time with the amount of AD groups the user has assigned. -No matter if we are using such AD groups in Cognos or not. A brand new user (with only a couple of Ad groups) has to wait eg 5seconds for the login, an old user with a lot of AD groups has to wait 44seconds, which is way too long.

We tried to connect via Azure AD in order to get rid of this problem but we need to configure everything for each user from scratch (without 3rd party) which makes also no sense to me.

Did somebody else meet the same problem or does somebody has any ideas how to fix it?

Thank you 

Daniel

Hello Daniel,

we cache user Information via cJap in memory for 24h. So, yes the first login is a little slower, but once logged in, no more queries are going to the AD or LDAP.

You could even set the cache time to 5 days or a month, or store the information locally, or update information from AD in background or pre-cache any user information. So, using cJap as proxy between Cognos and the AD opens up a lot of options.

Initial Introduction to cJAP: https://www.ibm.com/support/pages/ibm-cognos-custom-authentication

cJap Documentation: https://www.ibm.com/docs/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.ca_dg_auth.doc/ca_dg_auth.pdf

We can provide you the code base as we use it. 

I will be talking about this setup at IBM TechXchange EMEA in Barcelona. 

Best regards,

Ralf

Hello Ralf,

thank you! Sounds you are very experienced in such special things. Sounds like a pretty good solution. I will dig depper into this and let you know if we need more information.

Thank you

Daniel