Uploaded bySenturus
Migrating a Cognos Instance between Authentication Sources with Motio
The document outlines a webinar discussing the migration of Cognos instances between different authentication sources, specifically focusing on challenges and solutions provided by Motio. It covers common migration scenarios, security ID (camid) issues, and introduces Motio's Persona IQ and namespace migration services as solutions to maintain user roles and avoid the complexities associated with migrating camids. The webinar emphasizes the importance of smooth transitions in Cognos migrations to prevent disruptions in user access and security settings.
More Related Content
Similar to Migrating a Cognos Instance between Authentication Sources with Motio
![[Redis Released]- FalkorDB - Redis + Graph Agentic Memory’s Secret Sauce](https://cdn.slidesharecdn.com/ss_thumbnails/redisreleased-falkordbslidedeck-1125-251115194922-e1c0046b-thumbnail.jpg?width=640&height=640&fit=bounds)
Migrating a Cognos Instance between Authentication Sources with Motio
- 1. Migrating a CognosInstance between Authentication Sources with Motio www.senturus.com Helping Companies Learn From the Past, Manage the 1 Present and Shape the Future
- 2. This slide deckis part of a recorded webinar. To view the FREE recording of this entire presentation and download the slide deck, go to info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with- Motio.html The Senturus library has 50 other recorded webinars on assorted Cognos and BI topics which may interest you. Go to the recorded resources 2
- 3. Agenda • Welcome and Introduction • Common Migration Scenarios & Challenges • Demonstration • Next Steps • Q&A 3
- 4. Presenters Today Jim Frazier Steve Reed-Pittman Lance Hankins Senturus Senturus Motio Vice President, Sales Consultant Chief Technology Officer 4
- 5. Who is Senturus? • Consulting firm specializing in Corporate Performance Management – Business Intelligence – Tools of the Office of Finance • Enterprise planning & budgeting • Consolidate, close, report and file (CCRF) – San Francisco Business Times Hall of Fame -- Four consecutive years in Fast 100 list of fastest-growing private companies in the Bay Area • Experience – 13-year focus on performance management – More than 1,200 projects for 650+ clients • People – Business depth combined with technical expertise. Former CFOs, CIOs, Controllers, Directors... – DBAs with MBAs 5
- 6. A few ofour 650+ Clients 6
- 7. Motio Products Cognos Administration & Control Improve/Optimize Integrate/Extend IBM Cognos Cognos Security Migration Cognos Content 7
- 8. History of Motio 2010 2005 2008 Founded 1999 2012 201 2012 200 2006 0 3 2009 2005 Air 8
- 9. This slide deckis part of a recorded webinar. To view the FREE recording of this entire presentation and download the slide deck, go to info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with- Motio.html The Senturus library has 50 other recorded webinars on assorted Cognos and BI topics which may interest you. Go to the recorded resources 9
- 10. Common Migration Scenarios & Challenges 10
- 11. Common Migration Scenarios 1) Access Manager (SunONE LDAP) -> Active Directory 2) Access Manager (SunONE LDAP) -> newer LDAP (e.g., Oracle Directory Server, IBM Directory Server) 3) Migration of users between Active Directory domains 11
- 12. The Namespace MigrationChallenge What do all of the namespace migration scenarios shown in the previous slide have in common? They break your existing Cognos security configuration. To understand why, we need a quick primer on how Cognos manages its internal security IDs (called CAMIDs)… 12
- 13. Jones, Bob CAMID(“S7:4001”) Smith, Alex CAMID(“S7:4002”) … Series 7 Dallas Branch CAMID(“S7:4851”) Access NYC Branch CAMID(“S7:4852”) Manager Users, Groups & Roles from the external security Cognos source are identified in Cognos by their CAMIDs. Content Data Data Store Source Source 13 Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending
- 14. Jones, Bob CAMID(“S7:4001”) Smith, Alex CAMID(“S7:4002”) … Series 7 Dallas Branch CAMID(“S7:4851”) Access NYC Branch CAMID(“S7:4852”) Manager There are many CAMID References in the Content Store: Authenticates against, • Every security policy Exposes users / roles from • Every object’s owner • Every object’s contact • Schedules Depending on • Schedule Recipients security • Burst Slices Cognos requirements, CAMID • Cognos Namespace References may also Membership exist in Models: • Each User & their Content • My Folders Framework • Preferences Models • Portal Tabs • Watch Items Content Transformer Store Models 14 Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending
- 15. Active Jones, Bob CAMID(“S7:4001”) LDAP Directory Smith, Alex CAMID(“S7:4002”) … Series 7 Dallas Branch CAMID(“S7:4851”) So what happens if Access NYC Branch CAMID(“S7:4852”) you need to switch Manager Cognos to use a different external Security Source ? Jones, Bob CAMID(“AD:B3FF”) Smith, Alex CAMID(“AD:11F1”) … Cognos Dallas Branch CAMID(“AD:44EF”) NYC Branch CAMID(“AD:F84A”) Content Unfortunately, this causes all of the Store CAMIDs to change!!! 15 Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending
- 16. Security Policies Jones, Bob CAMID(“S7:4001”) BEFORE All of the old CAMID Smith, Alex CAMID(“S7:4002”) References on … Security Policies are now Invalid. Dallas Branch CAMID(“S7:4851”) NYC Branch CAMID(“S7:4852”) Jones, Bob CAMID(“AD:B3FF”) Smith, Alex CAMID(“AD:11F1”) … Dallas Branch CAMID(“AD:44EF”) AFTER NYC Branch CAMID(“AD:F84A”) These group references now show as “Unavailable”, Since their CAMIDs have changed Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending
- 17. Let’s recap.... Active LDAP Directory Re-configuring Cognos to use a different external security source invalidates all of the old CAMIDs, creating a mess in the Content Series 7 Store. Access Manager What are some options for handling this problem? 1. Manual re-mapping in Cognos Connection 2. Write custom code using the Cognos SDK 3. Packaged namespace migration solutions (Motio) 17 Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending
- 18. This slide deckis part of a recorded webinar. To view the FREE recording of this entire presentation and download the slide deck, go to info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with- Motio.html You will find this—and many other recorded webinars-- under the “IBM Cognos Business Intelligence” 18
- 19. Demonstration of MotioSolution 19
- 20. ™+ Persona / IQ Namespace Migration Product Briefing Webinar February 13th, 2013 COPYRIGHT 2013, MOTIO, INC – ALL RIGHTS RESERVED,
- 21. Migration Solution Overview •Motio has two solutions for solving this problem – Option #1 : Persona IQ • Overview of Product Functionality • Product Demonstration – Option #2 : Namespace Migration Service COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 22. Option #1 :Persona IQ™ • Key Highlights – Migrate between Cognos Authentication Sources : – WITHOUT changing the CAMIDs of users, groups & roles – Supports Migrating From / To : – Access Manager – Active Directory – LDAP – Persona IQ – Requires less than five minutes of Cognos downtime. – ZERO changes to the Cognos Content Store or FM / Transformer Models – Empowers application support personnel while still adhering to corporate authentication standard COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 23. … but youwant Cognos is LDAP or Cognos to point currently Active HERE instead. pointed HERE. Jones, Bob CAMID(“S7:4001”) Directory Smith, Alex CAMID(“S7:4002”) … Imports From Existing Dallas Branch CAMID(“S7:4851”) Security NYC Branch CAMID(“S7:4852”) Source Authenticates against, Persona Exposes users / roles from Persona Cognos DB Imports From Framework Models Content Data Data Store Source Transformer Source Models COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 24. … but youwant Cognos is LDAP or Cognos to point currently Active HERE instead. pointed HERE. Jones, Bob CAMID(“S7:4001”) Directory Smith, Alex CAMID(“S7:4002”) … Imports From Existing Security Dallas Branch CAMID(“S7:4851”) Source NYC Branch CAMID(“S7:4852”) Authenticates against, Persona Exposes users / roles from …after the transition, all users, groups & roles from Persona Cognos the original provider are DB Imports From available through Persona with the exact same CAMIDs as before. Framework Models Content Data Data Store Source Transformer Source Models COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 25. LDAP or Active Jones, Bob CAMID(“S7:4001”) Directory Smith, Alex CAMID(“S7:4002”) Jones, Bob Dallas Branch imported accounts are The CAMID(“S7:4851”) Persona associated with their Active Smith, Alex DB NYC Branch Directory counterparts, but CAMID(“S7:4852”) still exposed to Cognos with … their previous CAMID. …after the transition, all users, groups & roles from Cognos the original provider are available through Persona with the exact same CAMIDs as before. Framework Models Content Data Data Store Source Transformer Source Models COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 26. LDAP or Active Jones, Bob CAMID(“S7:4001”) Directory Smith, Alex CAMID(“S7:4002”) In this example, Bob and Jones, Bob Dallas Branch CAMID(“S7:4851”) Alex are associated with Persona their Active Directory Smith, Alex DB NYC Branch CAMID(“S7:4852”) Accounts, but still exposed … to Cognos with their previous CAMID. login Cognos Cognos users can now login using their AD or LDAP credentials. Their CAMID remains Framework the same as before. Models Content Data Data Store Source Transformer Source Models COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 27. LDAP or Active Jones, Bob CAMID(“S7:4001”) Directory Smith, Alex CAMID(“S7:4002”) Jones, Bob Dallas Branch CAMID(“S7:4851”) Persona Smith, Alex DB NYC Branch CAMID(“S7:4852”) … No CAMID changes means: login ZERO changes Cognos Cognos users can now required here! login using their AD or LDAP credentials. Their CAMID remains Framework the same as before. Models Content Data Data Store Source Transformer Source Models COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 28. This slide deckis part of a recorded webinar. To view the FREE recording of this entire presentation and download the slide deck, go to info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with- Motio.html The Senturus library has 50 other recorded webinars on assorted Cognos and BI topics which may interest you. Go to the recorded resources 28
- 29. Product Demo Demo Scenario: •Migrate Cognos 10.1 Instance from Access Manager to Active Directory. – There are some active Access Manager accounts which do NOT exist in Active Directory COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending
- 30. Option #2: MotioNamespace Migration Service • Technology assisted service • Proven Methodology
- 31.
- 32. Mapping Users from Series7 Namespace to Active Directory Namespace Source Target Namespace Namespace
- 34. Namespace Migration Service- In Summary • Technology assisted service • Proven methodology • Automates a time-intensive process • Reduces Risk "Migrating eighty five thousand objects manually would have taken us several months with several service disruptions to our end users. Motio's Namespace Migration streamlined this process and allowed us to successfully migrate eighty five thousand objects from Open LDAP to a Corporate LDAP server within just a few hours. Thank you Motio!" Avi Badwal Business Intelligence Manager University of San Diego ITS-EASS
- 35. Want to explorefurther? • More inquires? • Need assistance? Jim Frazier [email protected] 650.949.2921 35
- 36. This slide deckis part of a recorded webinar. To view the FREE recording of this entire presentation and download the slide deck, go to info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with- Motio.html The Senturus library has 50 other recorded webinars on assorted Cognos and BI topics which may interest you. Go to the recorded resources 36
- 37. Helping Companies LearnFrom the Past, Manage the Present and Shape the Future www.senturus.com 888.601.6010 [email protected] Copyright 2013 Senturus, Inc. This presentation may not be used without permission from Senturus, Inc. 37
- 38.