Cognos SSO

[Kevin Foote]

If I recall correctly Portland State is another school that was working on a remote_user type auth plugin for Cognos.
I believe their approach was to make the plugin a first class citizen in the Cognos app.
Not sure if they got anywhere with that approach but there is an SDK out there for it (via IBM).


--------
thanks
 kevin.foote

> On Oct 18, 2018, at 10:02, Oakley, Robert <rloakle at ilstu.edu> wrote:
> 
> Sorry for the confusion.  I meant to say our IDP SAML 2.0 with IBM ID.  It's not desirable from some folks on our side due to the having to sign into the IBM page with one's email address before being redirected to our SSO page.  
> 
> We have federated our domain with IBM, and I am just waiting on getting the client identifier & client secret key from IBM.  Apparently it's something they have not done yet with self-hosted customers.  
> 
> A more desirable solution is to implement our Cognos environment behind Shibboleth.  I'm just not sure exactly how to do this.  I'm the Cognos administrator and have been for years, but I'm not sure how to tie it in with our Shibboleth solution?
> 
> Thanks,
> 
> Rob Oakley
> Administrative Technologies
> Application Administrator
> 
> 
> -----Original Message-----
> From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
> Sent: Thursday, October 18, 2018 10:55 AM
> To: users at shibboleth.net
> Subject: Re: Cognos SSO
> 
> * rloakle <rloakle at ilstu.edu> [2018-10-18 17:39]:
>> Currently our university is looking at implementing our own SSO 
>> solution for our Cognos product.  I see since Cognos 11.07 we can 
>> implement SAML 2.0 using the OpenID Connect solution.
> 
> What does "implement SAML 2.0 using the OpenID Connect solution" even mean? Those are 2 different protocols. (Never mind that the Shibboleth IDP is in the process of growing OIDC support, thanks to our friends from Finnland!)
> 
>> We would like to use Shibboleth, but I'm not exactly sure how we can 
>> implement.
> 
> Did you even read the posts from the very thread you're replying to?
> E.g. the one from Robert Bradley from Feb 6th, 2018[1]?
> 
> Also check out the thread
> "Any experience of integrating IBM Cognos with Shibboleth?"
> from Feb 2016, esp. Brendan Bellina's post[2] and replies to that.
> 
> -peter
> 
> [1] http://shibboleth.net/pipermail/users/2018-February/039249.html
> [2] http://shibboleth.net/pipermail/users/2016-January/026348.html
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net