Post on 26-Feb-2016
description
transcript
Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x
Rich ChesterDirector of Consulting
John AntonucciSenior Business Development Manager
The Webinar will begin at 12:00pm Eastern
Audio – Webinar is using Webex Integrated Voice, ensure that your
speakers are on!
LPA Systems Confidential 2What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 2Cognos 10.2.x Multi-Tenancy
About LPA Systems
» Founded in 2001• IBM Business Analytics Partner since 2002• Specialty practice for IBM ASL Partner Enablement
– IBM Cognos ASL Team Strategic Implementation Partner– Over 50 IBM ASL/OEM clients
» IBM Cognos Business Analytics Credentials• IBM Premier Business Analytics Partner • IBM Cognos-focused BI consultancy• IBM Cognos Service “Core” Subcontractor Partner• Member of the IBM Cognos Partner Advisory Board
» Extensive IBM Cognos consulting and product experience• LPA BI Consultants have an average experience of 10+ years • Series 7, Cognos 10 & 8 BI Suite, TM1• Frequent IBM Business Analytics Beta Test participant (including
10.2.1)» Professional services partner for several Cognos ASL Partners» Committed to customer success and self-sufficiency
LPA Systems, Inc.- Proprietary
2
LPA Systems Confidential 3What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 3Cognos 10.2.x Multi-Tenancy
Design & Architecture
Project Scoping Workshop
C10 Solution Architecture
Integration assessment
Data Sourcing Migration assistance Product roadmap and
release planning Cognos proven
practicesDevelopment & Integration
Custom authentication Single sign-on Metadata Design Multi-Tenancy Dashboards and
analytics Data marts Integration using SDK Branding and
customization Portal integration Automation Best practices
Knowledge Transfer & Pre-Sales
Support
Best Practices Internal training Tuning &
troubleshooting Mentoring Knowledge Transfer Sales demos Trade show support
Go-to-Market Support
Professional services project scoping
Customized Training Project management ASL-Branded BI Service
Offerings
LPA Solution Architect
Knowledge Transfer
Flexible ASL Lifecycle Services Approach
LPA Systems Confidential 4What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 4Cognos 10.2.x Multi-Tenancy
Value Proposition for ASL Partners
» Significant experience in helping over 50 IBM Cognos OEM/ASL partners accelerate their solution time-to-market
» Familiar with the special challenges faced by OEM/ASL clients:• On-Premise, On-Demand and hybrid delivery models• Complex custom security provider• Multi-tenanted data modeling and complex report development• Rebranding, integration and automation• Deployment strategy and go-to-market assistance
» High impact consultants with depth and breadth of product, industry and project experience
» A flexible, phased implementation approach that is focused on delivering measurable business value within small time-boxes• The end goal is for OEM/ASL partner to own the solution
» A SDLC “Lifecycle Approach” for delivering flexible service through all phases of the OEM/ASL project lifecycle
» Close coordination with the Cognos ASL sales and technical teams» Proven OEM/ASL services delivery methodology
LPA Systems Confidential 5What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 5Cognos 10.2.x Multi-Tenancy
LPA Cognos Offerings for ASL Partners
Offering IncludesASL Environment Review Troubleshoot, diagnose, and remediate problems
and performance issues with existing ASL deployments.
Cognos 10.2 Upgrade Strategy & Planning Advisory Service for OEM/ASL Partners
Upgrade and Product Release Plan, Creation of a 10.2 “sandbox” Environment, Validation of key components and selected content, Prototype new 10.2 Capabilities, Knowledge Transfer / Training
Cognos 10.2 Training Onsite 2 day training to bring Staff up to speed quickly on all new 10.2 Capabilities
OLAP Strategy & Planning Advisory Service for OEM/ASL Partners
Defined OLAP Strategy and Product Release plan, prototype OLAP Model with your data, defined ROI for the introduction of OLAP to your business, Training Plan
Cognos Workspace Strategy & Planning Advisory Service for OEM/ASL Partners
Defined Workspace Strategy, Implementation Plan, Product Release Plan, prototype Workspace with your data, Training Plan
LPA Systems Confidential 6
IOD 2013
Save $400: Register for IOD 2013 with LPAJust enter our promo code: G13LPASYS
Early Bird: $1,895 USD per person – July 12 – September 13 Standard Fee: $2,195 USD per person - September 14 November 7
LPA Systems Confidential 7What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 7Cognos 10.2.x Multi-Tenancy
» What is a Multi-Tenant Implementation?» Specifying Tenant Properties» Enabling Multi-Tenancy in Cognos
Configuration» Options for communicating Tenant ID at
login» Object Security» Tenant Administration» Quick Demonstration» Questions & Answers
Agenda
LPA Systems Confidential 8What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 8Cognos 10.2.x Multi-Tenancy
What is a Cognos Multi-Tenant Implementation?
» A single instance of IBM Cognos serving multiple client organizations• One IBM Cognos Content Store• Data may or may not be co-mingled in source databases• Cognos objects (folders, reports, data source connections...) may be private to a
single tenant or public to all tenants• Prior to Cognos 10.2 was implemented using Group and Role security schemes
Your User Interface or IBM Cognos Connection
Tenant 1 Tenant 3Tenant 2
Content Store
Public
Tenant 1
Tenant 2
Tenant 3
Data SourceTenant 1
Tenant 2
Tenant 3
DataSource
Tenant 1
Tenant 2
Tenant 3
DataSource Data
Source
LPA Systems Confidential 9What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 9Cognos 10.2.x Multi-Tenancy
Specifying Tenancy on Objects
» With IBM Cognos 10.2.0 an optional new property was introduced: Tenant ID• An object with no tenant id specified is considered “public” and
available to all tenants• An object with a tenant id specified is considered private to that
tenant• Only zero or one tenant id can be specified on an object• Available on nearly every object in IBM Cognos Connection• When placed on a container (ex: folder, package) all objects in the
container inherit and cannot be overridden
LPA Systems Confidential 10What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 10Cognos 10.2.x Multi-Tenancy
Enabling Multi-Tenancy
On each 10.2.x Content Manager server:1. Run IBM Cognos Configuration2. Setup “Advanced Properties” specifying how Tenant ID will be
supplied at login3. Restart Services
LPA Systems Confidential 11What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 11Cognos 10.2.x Multi-Tenancy
Options for specifying Tenant Id - Ancestors
Option 1: Use the position of a user within the Ancestors Hierarchy» is auto-populated by LDAP or Active Directory» is created within your Custom Authentication Provider
Ancestor Hierarchy LDAP Example
CAPExample
ancestors[0] Directory node Any array
element can hold the Tenant ID
ancestors[1] Namespace ID Base DNancestors[2] Tenant
grouping such as a folder
Organizational units
LPA Systems Confidential 12What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 12Cognos 10.2.x Multi-Tenancy
Options for specifying Tenant Id - Properties
Option 2: Use a mapped property or parameter» Map a specific account attribute from your authentication
provider (ex: account.personalInfo.xxxxxx)» LDAP and AD Users: This method may require that you
identify additional properties to be queried during the user authentication process in the “Custom properties” property for your namespace
LPA Systems Confidential 13What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 13Cognos 10.2.x Multi-Tenancy
Options for specifying Tenant Id – Custom App
Option 3: Create a custom Java application that is invoked during the user authentication process» Uses the IBM Cognos SDK
• A sample program is provided with the SDK install» Returns a string given an account object» May derive the tenant information from account
information directly, or can retrieve tenant mappings from an external source
» This is not your Custom Authentication Provider (and if you have a CAP you would not use this method)
LPA Systems Confidential 14What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 14Cognos 10.2.x Multi-Tenancy
Set Globally or by Namespace
LPA Systems Confidential 15What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 15Cognos 10.2.x Multi-Tenancy
Data Source: Data Source Signon:
Folder: Package:
Object Security in IBM Cognos Connection
PublicPrivate
LPA Systems Confidential 16What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 16Cognos 10.2.x Multi-Tenancy
Implications after applying Tenant ID
» System Administrators can see all content, both public and tenant-specific• There is no provision for individual
Tenant-specific system administrators
» Once a Tenant ID is set on an object, children of the parent object cannot be public or set to a different Tenant ID
» Users have the potential to see and use all public objects and those objects associated with their Tenant Id• A user must still have permission
to access an object (read, write, execute, traverse, set policy)
• Tenant ID security is in addition to object security implemented on the Permissions tab
LPA Systems Confidential 17What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 17Cognos 10.2.x Multi-Tenancy
Framework Manager
» Framework Manager session parameters include tenantID• For example, you could use the TenantID parameter to filter Query
Subjects in co-mingled data source situations• If you mapped a parameter from your security provider (Option 2)
to provide the Tenant ID, that parameter is also available
LPA Systems Confidential 18What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 18Cognos 10.2.x Multi-Tenancy
IBM Cognos Administration Multitenancy Tab
» New Multitenancy tab in IBM Cognos 10.2.1• Onboard new tenants• Delete a tenant• Enable/Disable logins• Terminate active sessions• Manage default user profiles
LPA Systems Confidential 19What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 19Cognos 10.2.x Multi-Tenancy
Demonstration
LPA Systems Confidential 20What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 20Cognos 10.2.x Multi-Tenancy
Questions?
LPA Systems Confidential 21What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 21Cognos 10.2.x Multi-Tenancy
How LPA Can Help
IBM Cognos, SPSS, & FPM» Healthcare Solutions for Clinical Reporting and Service Line Reporting» IBM Software Licensing and IBM Support Renewals» Needs Assessment and Business Case Justification» Solution Architecture, Design & Implementation» Migrations and Upgrades » Performance Tuning and Troubleshooting» Metadata Development» Report and Dashboard Development» SDK and Custom Authentication Provider» Training SolutionsData Warehouse» Full Project Lifecycle» Supplemental Resources» Specialized Skills (Data Manager, SSIS and others)
LPA Systems Confidential 22What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 22Cognos 10.2.x Multi-Tenancy
» Do to unforeseen problems, we will need to cancel today’s webinar which will be resceduled.