Any experience of integrating IBM Cognos with Shibboleth?

[Eric Goodman]

AFAIK, you can't just put Shib SP in front of Cognos (or most any IBM product), as Cognos doesn't have a supported mechanism for reading usernames from web variables.

It's my understanding that Cognos (and most other IBM products) do support JAAS authentication, and so that is probably the correct route forward. We're very likely to explore this approach for Cognos in the nearish future.


Documentation for authenticating users in a JAAS module leveraging the SP is fairly sparse. The one Shibboleth SP-specific page I've seen is https://wiki.shibboleth.net/confluence/display/SHIB2/Java+EE+Container-Managed+Authentication

It seems like you don't do anything terribly special with the Shibboleth SP -- just protect the site and have Shibboleth set app server values -- and then you build a JAAS LoginModule to pull the info (e.g., REMOTE_USER) to set the user principal in the app. I hear rumors that it's hard to add custom JAAS modules to IBM's products. But whether that's because of general JAAS issues, specific IBM issues or just lack of experience on the part of the people telling me this, I don't know.

--- Eric


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of n99
Sent: Thursday, January 12, 2017 6:54 AM
To: users at shibboleth.net
Subject: RE: Any experience of integrating IBM Cognos with Shibboleth?

hello :)

This is an old thread but hope I get a reply!

I was wondering about this idea of using a Native Shibboleth SP to "
basically just send the unique identifier for the user into Cognos at Login."

I would be very grateful if could you expand on how this was done please.

Did you install a Shibboleth SP into the gateway web server?

ie Did you (simply) install either mod_shib into apache or https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPWindowsIIS7Installer
in IIS 

any help appreciated

Cheers

nomit



Y




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Any-experience-of-integrating-IBM-Cognos-with-Shibboleth-tp7621919p7630710.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net