/
Setting Up SSO with CAM and Arc

Setting Up SSO with CAM and Arc

Setting Up SSO with CAM and Arc

This guide explains how to configure Single Sign-On (SSO) with IBM Cognos Access Manager (CAM) security and Arc, so users can log in to TM1 via Arc without being prompted for credentials.

Prerequisite: The user must be able to access http://<host>:<port>/ibmcognos from their PC without being prompted for a username and password before starting this configuration.
Browser compatibility: SSO with CAM works with Internet Explorer and Chrome due to security configuration requirements.

Step 1: Update the Cognos Application Firewall

Add the Arc host and port to the Cognos Application Firewall allowlist. Replace <ServerName> with your Arc server name:

  • Example entry: cw13:7070

This allows Cognos to accept requests originating from Arc.

Step 2: Add the Arc URL to variables_TM1.xml

Add the following line to the variables_TM1.xml file in your Cognos BI/Analytics installation:

<url is-regex="true">http://<ServerName>:7070/auth/token(\?.*)</url>

Replace <ServerName> with the actual Arc server name.

This file can be found in one of these locations depending on your Cognos version:

  • Program Files\ibm\cognosanalytics\templates\ps\portal

  • Program Files\ibm\cognos\c10_64\templates\ps\portal

After saving the file, restart the IBM Cognos service.

Step 3: Log In to Arc Using the Gateway Option

No additional configuration is needed on the Arc side. Once Cognos is configured:

  1. Open Arc in your browser.

  2. Click on the TM1 instance you want to connect to.

  3. In the login dialog, choose the Gateway option.

  4. Click Login.

After the first successful login, Arc will automatically connect you in future sessions without prompting for credentials.

Related Pages