Cognos Controller - Active

Directory and Single Sign On

Contents
Creating Active Directory Namespace in Controller ......................................................................... 2
Step 1: ................................................................................................................................................. 2
Create new namespace in Cognos Configuration ............................................................................... 2
Step 2: ................................................................................................................................................. 2
Configure Cognos 8 Authentication ..................................................................................................... 2
Step 3: ................................................................................................................................................. 3
Create IIS 7.0 application pool ............................................................................................................ 3
Step 4: ................................................................................................................................................. 4
Add users to Controller Users and Controller Administrator groups within Cognos Admin ................ 4
Controller and Single Sign On ............................................................................................................. 5
Step 1: ................................................................................................................................................. 5
Add Single Sign On to AD namespace ............................................................................................... 5
Step 2: ................................................................................................................................................. 5
Change authentication in IIS ............................................................................................................... 5
Step 3: ................................................................................................................................................. 6
Configure Internet Explorer add the FQDN servername to Trusted Sites ....................................... 6
Step 4: ................................................................................................................................................. 7
Configure Internet Explorer Customer Level for Local intranet and Trusted sites ........................... 7

Controller and Active Directory

Creating Active Directory Namespace in Controller

Step 1:
Create new namespace in Cognos Configuration
1. Security > Authentication > Right Click > New Resource > Namespace

2. Fill in box below:

3. Add details to properties box as below. Namespace ID must be the same as the Cognos
domain name (Binding Credentials can be left unedited):

4. Test connection by right clicking the new namespace and clicking Test
5. Save (if test passes)
6. Start service
Step 2:
Configure Cognos 8 Authentication
1. Open Controller Configuration
2. Navigate to Server Authentication
3. Select Cognos 8 from Select authentication method dropdown box
Controller and Active Directory

4. Click Save

Step 3:
Create IIS 7.0 application pool
1.
2.
3.
4.
5.
6.

Open Programs > Administrative Tools > Internet Information Services

Navigate to Application Pools and right-click
Select Add Application Pool
Name the application pool Cognos and leave all settings as default
Select Cognos application pool, right-click and click Advanced Settings
Locate Identity in the window and change to Local System as below:

7. Add IIS controllerserver application to Cognos application pool by selecting and choosing
Basic Settings and setting up as below:

Controller and Active Directory

Step 4:
Add users to Controller Users and Controller Administrator groups within Cognos Admin
1. Open Cognos Administration (http://<servername>/ibmcognos)
2. Click on Administer IBM Cognos Content
3. Navigate to Security > Cognos > Controller Users > Set Members > Add > <namespace> >
Users
4. Select Domain Users/Administrators
5. Click green arrow and click OK > OK
6. Stop and start Cognos services
7. Login using AD credentials created

Controller and Active Directory

Controller and Single Sign On

Ensure that throughout either FQDN or NetBios is configured.
Step 1:
Add Single Sign On to AD namespace
1. Open Cognos Configuration > Security > Authentication and select the new namespace
2. Add the variables for Advanced Properties as the screen shot below:

3. Save and restart the Cognos services

Step 2:
Change authentication in IIS
1. Open Start > Programs > Administrative Tools > IIS
2. Click on the server name and double click Authentication
3. From here make sure that Anonymous Authentication is DISABLED and that Windows
Authentication is ENABLED (refer to page 6)

Controller and Active Directory

NB: Make sure that this is completed for the Default Web Site and ibmcognos web site
Step 3:
Configure Internet Explorer add the FQDN servername to Trusted Sites
1. Open IE > Tools > Options
2. Open Security > Trusted Sites > Sites
3. Add the FQDN servername as below:

Controller and Active Directory

Step 4:
Configure Internet Explorer Customer Level for Local intranet and Trusted sites
1.
2.
3.
4.

Open IE > Tools > Options

Click on the Security > Local intranet
Select Custom Level
Scroll down and underneath Security select Automatic logon with username and password
as below:

5. Repeat for Trusted sites

Controller and Active Directory