Cognos Analytics

 View Only

  • 1.  Executing trigger using OKTA as authentication source

    Posted Fri December 16, 2022 09:54 AM
    Hi all,

    Has anyone tried to execute a trigger.bat to initiate a schedule run in IBM Cognos environment using OKTA as the authentication provider?
    I'm asking this because I recently had a case of authentication source change (from AD to OKTA) and although the trigger worked fine with AD, with OKTA returns the following error:
    CM-CAM-4005 Unable to authenticate. Check your security directory server connection and confirm the credentials entered at login.

    The command I execute is:
    C:\trigger\trigger.bat http://<server name>:9300/p2pd/servlet/dispatch <username> <password> OKTA "<report name>"
    Whatever is in  <> are placeholders.

    IIS is used as the web server gateway for cognos and it is secured (http:s//<server name>/ibmcognos).  Dispatcher does not use ssl (as you may see above in url).

    Any suggestions will be appreciated.

    Kind Regards,
    Katerina Andreou

    ------------------------------
    katerina andreou
    ------------------------------

    #CognosAnalyticswithWatson


  • 2.  RE: Executing trigger using OKTA as authentication source

    IBM Champion
    Posted Mon December 19, 2022 03:48 AM
    Hi Katerina,

    It might be worth asking: do you use the namespace instead of the namespace_id?

    Trigger should use namespace_id NOT the namespace. I assume what you call "<report name>" is actually triggername 

    Best regards,

    ------------------------------
    Patrick Neveu
    Positive Thinking Company
    ------------------------------

    Original Message


  • 3.  RE: Executing trigger using OKTA as authentication source

    Posted Mon December 19, 2022 05:34 AM
    Dear Patrick,

    I set namespace_id in command (OKTA) and indeed "<report name>"  is the trigger name assigned to report.

    Kind Regards



    ------------------------------
    katerina andreou
    ------------------------------

    Original Message


  • 4.  RE: Executing trigger using OKTA as authentication source

    IBM Champion
    Posted Mon December 19, 2022 08:58 AM
    Hi Katerina,

    I guess you should contact IBM Technical Support for this issue with OKTA.

    Best regards,

    ------------------------------
    Patrick Neveu
    Positive Thinking Company
    ------------------------------

    Original Message


  • 5.  RE: Executing trigger using OKTA as authentication source

    Posted Mon December 19, 2022 09:21 AM
    Edited by System Fri January 20, 2023 04:26 PM

    Hi Katerina,

    What Grant type does the OKTA Application being used have? I believe that Resource Owner Password will allow you to pass the ID/PW.

    https://www.ibm.com/support/pages/cognos-analytics-oidc-authentication-sdk

    (Edit)

    I tested on my system to verify.
    C:\CA11\webapps\utilities\trigger>trigger https://Cognos22.ibm.com:13450/p2pd/servlet/dispatch Trevor@ibm.com Admin1234 OKTA OKTA_Trigger
    Trigger: OKTA_Trigger fired successfully

    ------------------------------
    TREVOR COMEAU
    ------------------------------

    Original Message


  • 6.  RE: Executing trigger using OKTA as authentication source

    Posted Mon January 16, 2023 10:03 AM
    Dear TREVOR,

    Thanks for your answer.
    I send your suggestion to my customer and set the recommended options, as it appears on your screenshot. I run thfe trigger script but the error remains. The difference, I noticed, from your commend is that you are using https protocol and in my command is used http. 
    Another thing that I'd like to notice is that while I'm logged in in Cognos portal I'm not able to save my credentials so as to be used for a report schedule. Do you believe that this is originated from the same issue?

    Kind Regards

    ------------------------------
    Pantelis Stavroulidakis
    ------------------------------

    Original Message


  • 7.  RE: Executing trigger using OKTA as authentication source

    Posted Tue January 17, 2023 10:03 AM

    Hi Pantelis,

    I don't know you could run with HTTP on the dispatcher when connecting through OIDC so I am not sure what the implications are in this case.


    The definitive source for information on using OIDC and Cognos is on Tony's Linked In page. It is where I go for information.
    https://uk.linkedin.com/in/tmarziano

    Best Regards,



    ------------------------------
    TREVOR COMEAU
    ------------------------------

    Original Message