Planning Analytics

 View Only
  • 1.  SAML authentication TM1Web

    Posted Sun February 21, 2021 06:13 PM
    Hi All,

    I've been asked by a client if tm1web can be accessed using SSO via SAML.

    I understand it can only be done via CAM or SPNEGO, but found this:

    Federated authentication (ibm.com)

    Is this just for IBMs cloud offering, or can it be done using SAML locally

    Thanks

    ------------------------------
    Malcolm MacDonnell
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: SAML authentication TM1Web

    Posted Mon February 22, 2021 08:54 AM

    Hi Malcolm,

    The link you shared is specific to our Cloud Service (and yes SAML is possible in our Cloud Service for TM1web using that link).

    Regards,



    ------------------------------
    Paulo Monte
    ------------------------------



  • 3.  RE: SAML authentication TM1Web

    Posted Mon February 22, 2021 02:49 PM
    Thanks Paulo




  • 4.  RE: SAML authentication TM1Web

    IBM Champion
    Posted Wed October 19, 2022 06:34 AM
    Hi Paulo and others,

    Resurrecting this post to see if anything has changed in the last 18 months.

    We are migrating a client to their Azure private cloud and InfoSec are saying LDAP/LDAPS is not an option, must be SAML through federation.
    Is this possible by fiddling with the Websphere and TM1 Web configuration files?
    Are there documents explaining requirements, steps etc. etc?

    Thank you.

    ------------------------------
    George Tonkin
    ------------------------------



  • 5.  RE: SAML authentication TM1Web

    Posted Mon February 22, 2021 09:15 AM

    The SAML option is cloud only.

    If you are looking at PA local, and you security is set to type 3, then it is SPNEGO only, which is classic Windows Authentication for sso.
    When you use security type 5 (aka CAM), you can have a look what Cognos Analytics has to offer.
    Both Cognos Analytics AD and LDAP connector uses the same Windows Authentication logic for sso.
    For Cognos Analytics IBM additionally opted for the openid standard, instead of SAML, which gives you also the following authentication sources:
    https://www.ibm.com/support/knowledgecenter/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.inst_cr_winux.doc/c_openid_namespace.html
    Once successfully logged in into your openid authentication source, the logic will automatically log you into Cognos Analytics, thus also Planning Analytics.



    ------------------------------
    STEFAN VERMEULEN
    ------------------------------



  • 6.  RE: SAML authentication TM1Web

    Posted Mon February 22, 2021 02:49 PM
    Thanks Stefan