Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x

Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x

Rich ChesterDirector of Consulting

John AntonucciSenior Business Development Manager

The Webinar will begin at 12:00pm Eastern

Audio – Webinar is using Webex Integrated Voice, ensure that your

speakers are on!

LPA Systems Confidential 2What’s New in IBM Cognos BI 10.2?LPA Systems, Inc.- Proprietary 2Cognos 10.2.x Multi-Tenancy

About LPA Systems

» Founded in 2001• IBM Business Analytics Partner since 2002• Specialty practice for IBM ASL Partner Enablement

– IBM Cognos ASL Team Strategic Implementation Partner– Over 50 IBM ASL/OEM clients

» IBM Cognos Business Analytics Credentials• IBM Premier Business Analytics Partner • IBM Cognos-focused BI consultancy• IBM Cognos Service “Core” Subcontractor Partner• Member of the IBM Cognos Partner Advisory Board

» Extensive IBM Cognos consulting and product experience• LPA BI Consultants have an average experience of 10+ years • Series 7, Cognos 10 & 8 BI Suite, TM1• Frequent IBM Business Analytics Beta Test participant (including

10.2.1)» Professional services partner for several Cognos ASL Partners» Committed to customer success and self-sufficiency

LPA Systems, Inc.- Proprietary

2


Design & Architecture

Project Scoping Workshop

C10 Solution Architecture

Integration assessment

Data Sourcing Migration assistance Product roadmap and

release planning Cognos proven

practicesDevelopment & Integration

Custom authentication Single sign-on Metadata Design Multi-Tenancy Dashboards and

analytics Data marts Integration using SDK Branding and

customization Portal integration Automation Best practices

Knowledge Transfer & Pre-Sales

Support

Best Practices Internal training Tuning &

troubleshooting Mentoring Knowledge Transfer Sales demos Trade show support

Go-to-Market Support

Professional services project scoping

Customized Training Project management ASL-Branded BI Service

Offerings

LPA Solution Architect

Knowledge Transfer

Flexible ASL Lifecycle Services Approach


Value Proposition for ASL Partners

» Significant experience in helping over 50 IBM Cognos OEM/ASL partners accelerate their solution time-to-market

» Familiar with the special challenges faced by OEM/ASL clients:• On-Premise, On-Demand and hybrid delivery models• Complex custom security provider• Multi-tenanted data modeling and complex report development• Rebranding, integration and automation• Deployment strategy and go-to-market assistance

» High impact consultants with depth and breadth of product, industry and project experience

» A flexible, phased implementation approach that is focused on delivering measurable business value within small time-boxes• The end goal is for OEM/ASL partner to own the solution

» A SDLC “Lifecycle Approach” for delivering flexible service through all phases of the OEM/ASL project lifecycle

» Close coordination with the Cognos ASL sales and technical teams» Proven OEM/ASL services delivery methodology


LPA Cognos Offerings for ASL Partners

Offering IncludesASL Environment Review Troubleshoot, diagnose, and remediate problems

and performance issues with existing ASL deployments.

Cognos 10.2 Upgrade Strategy & Planning Advisory Service for OEM/ASL Partners

Upgrade and Product Release Plan, Creation of a 10.2 “sandbox” Environment, Validation of key components and selected content, Prototype new 10.2 Capabilities, Knowledge Transfer / Training

Cognos 10.2 Training Onsite 2 day training to bring Staff up to speed quickly on all new 10.2 Capabilities

OLAP Strategy & Planning Advisory Service for OEM/ASL Partners

Defined OLAP Strategy and Product Release plan, prototype OLAP Model with your data, defined ROI for the introduction of OLAP to your business, Training Plan

Cognos Workspace Strategy & Planning Advisory Service for OEM/ASL Partners

Defined Workspace Strategy, Implementation Plan, Product Release Plan, prototype Workspace with your data, Training Plan

LPA Systems Confidential 6

IOD 2013

Save $400: Register for IOD 2013 with LPAJust enter our promo code: G13LPASYS

Early Bird: $1,895 USD per person – July 12 – September 13 Standard Fee: $2,195 USD per person - September 14 November 7

https://www-950.ibm.com/events/tools/iod/iod2013/secure/regWizard.do?step=begin&enrollType=Customer&promoCode=G13LPASYS


» What is a Multi-Tenant Implementation?» Specifying Tenant Properties» Enabling Multi-Tenancy in Cognos

Configuration» Options for communicating Tenant ID at

login» Object Security» Tenant Administration» Quick Demonstration» Questions & Answers

Agenda


What is a Cognos Multi-Tenant Implementation?

» A single instance of IBM Cognos serving multiple client organizations• One IBM Cognos Content Store• Data may or may not be co-mingled in source databases• Cognos objects (folders, reports, data source connections...) may be private to a

single tenant or public to all tenants• Prior to Cognos 10.2 was implemented using Group and Role security schemes

Your User Interface or IBM Cognos Connection

Tenant 1 Tenant 3Tenant 2

Content Store

Public

Tenant 1

Tenant 2

Tenant 3

Data SourceTenant 1

Tenant 2

Tenant 3

DataSource

Tenant 1

Tenant 2

Tenant 3

DataSource Data

Source


Specifying Tenancy on Objects

» With IBM Cognos 10.2.0 an optional new property was introduced: Tenant ID• An object with no tenant id specified is considered “public” and

available to all tenants• An object with a tenant id specified is considered private to that

tenant• Only zero or one tenant id can be specified on an object• Available on nearly every object in IBM Cognos Connection• When placed on a container (ex: folder, package) all objects in the

container inherit and cannot be overridden


Enabling Multi-Tenancy

On each 10.2.x Content Manager server:1. Run IBM Cognos Configuration2. Setup “Advanced Properties” specifying how Tenant ID will be

supplied at login3. Restart Services


Options for specifying Tenant Id - Ancestors

Option 1: Use the position of a user within the Ancestors Hierarchy» is auto-populated by LDAP or Active Directory» is created within your Custom Authentication Provider

Ancestor Hierarchy LDAP Example

CAPExample

ancestors[0] Directory node Any array

element can hold the Tenant ID

ancestors[1] Namespace ID Base DNancestors[2] Tenant

grouping such as a folder

Organizational units


Options for specifying Tenant Id - Properties

Option 2: Use a mapped property or parameter» Map a specific account attribute from your authentication

provider (ex: account.personalInfo.xxxxxx)» LDAP and AD Users: This method may require that you

identify additional properties to be queried during the user authentication process in the “Custom properties” property for your namespace


Options for specifying Tenant Id – Custom App

Option 3: Create a custom Java application that is invoked during the user authentication process» Uses the IBM Cognos SDK

• A sample program is provided with the SDK install» Returns a string given an account object» May derive the tenant information from account

information directly, or can retrieve tenant mappings from an external source

» This is not your Custom Authentication Provider (and if you have a CAP you would not use this method)


Set Globally or by Namespace


Data Source: Data Source Signon:

Folder: Package:

Object Security in IBM Cognos Connection

PublicPrivate


Implications after applying Tenant ID

» System Administrators can see all content, both public and tenant-specific• There is no provision for individual

Tenant-specific system administrators

» Once a Tenant ID is set on an object, children of the parent object cannot be public or set to a different Tenant ID

» Users have the potential to see and use all public objects and those objects associated with their Tenant Id• A user must still have permission

to access an object (read, write, execute, traverse, set policy)

• Tenant ID security is in addition to object security implemented on the Permissions tab


Framework Manager

» Framework Manager session parameters include tenantID• For example, you could use the TenantID parameter to filter Query

Subjects in co-mingled data source situations• If you mapped a parameter from your security provider (Option 2)

to provide the Tenant ID, that parameter is also available


IBM Cognos Administration Multitenancy Tab

» New Multitenancy tab in IBM Cognos 10.2.1• Onboard new tenants• Delete a tenant• Enable/Disable logins• Terminate active sessions• Manage default user profiles


Demonstration


Questions?


How LPA Can Help

IBM Cognos, SPSS, & FPM» Healthcare Solutions for Clinical Reporting and Service Line Reporting» IBM Software Licensing and IBM Support Renewals» Needs Assessment and Business Case Justification» Solution Architecture, Design & Implementation» Migrations and Upgrades » Performance Tuning and Troubleshooting» Metadata Development» Report and Dashboard Development» SDK and Custom Authentication Provider» Training SolutionsData Warehouse» Full Project Lifecycle» Supplemental Resources» Specialized Skills (Data Manager, SSIS and others)


» Do to unforeseen problems, we will need to cancel today’s webinar which will be resceduled.

Date post:	26-Feb-2016
Category:	Documents
Upload:	nigel
View:	212 times
Download:	2 times

Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x

Documents