-
Chapter 1: Authentication Providers
- A Full Authentication Provider
- A Trusted Signon Provider
-
Chapter 2: Developing a Custom Authentication Provider
-
1. Planning Your Implementation
-
1.1
- Create a flow diagram that represents a high level view of the authentication process and identifies the entry points to IBM Cognos 8.
-
1.2
- Determine how to authenticate users
-
1.3
- Consider the objects you must use in your provider
-
1.4
- Consider any objects, such as accounts or groups, and their properties, that you cannot store in your authentication source
-
1.5
- Initialize your authentication source
-
1.6
- Create a manifest for the jar file
-
2. Defining User Authentication Methods
-
2.1 Authentication Requests: Flow Scenarios
-
2.1.1 The identification information objects
- Object
- Description
- Form fields
- HTML form elements used for data input, such as a user
name and password, from a Web page.
- Credentials
- Identification information, typically a user ID and password,
provided by the IBM Cognos 8 SDK program logon method
or by Content Manager to run scheduled reports and jobs.
- Cookies
- The cookie values store the information from the browser
session
- Environment variables
- The environment variable values store the information from
the entry point gateway.
- Trusted environment variables
- The environment variable values signed by the entry point
gateway.
- 2.1.2 The following diagram shows the flow of an authentication request.
- 2.1.3 Scenario 1: Processing Requests That Contain All Required Logon Information
- 2.1.4 Scenario 2: Processing Requests When Input From a User Is Required
- 2.1.5 Scenario 3: Processing Requests When Input From the System Is Required
-
2.1.6 Handling an Unrecoverable Error
- User interface object
- Description
- Caption
- Displays the text to the user, for example, to identify an error
condition.
- Message
- Shows error details.
Authentication services logs the message data to the IBM
Cognos 8 Indication Processing Facility (IPF).
- ReadOnlyDisplayObject
- Shows the context information. For example, it can be a
prompt that says: "Enter the password for smithj."
- HiddenDisplayObject
- Maintains context information across multiple requests.
- TextDisplayObject
- A regular input text box for a user name and other unsecured
data.
- SingleSelectDisplayObject
- A drop-down list with one selection possible.
- MultiSelectDisplayObject
- A drop-down list with multiple selections possible.
- VerifyTextNoEchoDisplayObject
- An input text box used for a password change verification.
- TextNoEchoDisplayObject
- Echoes for entered text, such as "*". Use for passwords and
other secure data.
-
2.2 Implementing the User Authentication Interfaces
- 2.2.1 INamespaceAuthenticationProvider2 Interface
- 2.2.2 IVisa Interface
- 3. Defining Namespace Searches