Cognos SSO

[Oakley, Robert]

Sorry for the confusion.  I meant to say our IDP SAML 2.0 with IBM ID.  It's not desirable from some folks on our side due to the having to sign into the IBM page with one's email address before being redirected to our SSO page.  

We have federated our domain with IBM, and I am just waiting on getting the client identifier & client secret key from IBM.  Apparently it's something they have not done yet with self-hosted customers.  

A more desirable solution is to implement our Cognos environment behind Shibboleth.  I'm just not sure exactly how to do this.  I'm the Cognos administrator and have been for years, but I'm not sure how to tie it in with our Shibboleth solution?

Thanks,

Rob Oakley
Administrative Technologies
Application Administrator


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Thursday, October 18, 2018 10:55 AM
To: users at shibboleth.net
Subject: Re: Cognos SSO

* rloakle <rloakle at ilstu.edu> [2018-10-18 17:39]:
> Currently our university is looking at implementing our own SSO 
> solution for our Cognos product.  I see since Cognos 11.07 we can 
> implement SAML 2.0 using the OpenID Connect solution.

What does "implement SAML 2.0 using the OpenID Connect solution" even mean? Those are 2 different protocols. (Never mind that the Shibboleth IDP is in the process of growing OIDC support, thanks to our friends from Finnland!)

> We would like to use Shibboleth, but I'm not exactly sure how we can 
> implement.

Did you even read the posts from the very thread you're replying to?
E.g. the one from Robert Bradley from Feb 6th, 2018[1]?

Also check out the thread
"Any experience of integrating IBM Cognos with Shibboleth?"
from Feb 2016, esp. Brendan Bellina's post[2] and replies to that.

-peter

[1] http://shibboleth.net/pipermail/users/2018-February/039249.html
[2] http://shibboleth.net/pipermail/users/2016-January/026348.html
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net