Any experience of integrating IBM Cognos with Shibboleth?

[Julian Williams]

Dear Shibboleth users,

I'm interested to know if any of you have any experience of integrating 
IBM Cognos with Shibboleth?

We have been asked to help with implementing this for a new project 
here. At this stage the details we have are very thin on the ground but 
this is what I believe to be the case so far...

Cognos can't do SAML AuthN natively but can do via a 3rd party Custom 
Authentication Provider, in this case Motio CAP. However, whether it can 
work with our Shibboleth SSO (and our current requirement of registering 
metadata with the UK Federation is yet to be determined).

Cognos/Motio CAP can't seem to accept attributes from a SAML assertion 
and so requires a 2nd step LDAP query to resolve attributes (and 
determine authorised users).


Any experience your willing to share with us (on or off list) will be 
much appreciated.


Cheers,

Julian


-- 
Julian Williams (Systems Developer, Identity and Access Management)
Systems Development and Support, IT Services, University of Oxford