Here is environment.
Cognos 8.3, Active Directory, Windows Server 2003, IIS
I am trying to set up Single Signon and have run into a bump.
In IIS, I have checked Integrated Windows authentication on the Cognos8 virtual site.
In Cognos Configuration, I have added a new namespace for Active Directory called Active Directory under Authentication.
In this namespace, I have set the binding credentials and under Advanced properties, created an entry with a name as singleSignonOption and a value of IdentityMapping.
Under Authentication/Cognos, I have set Allow anonymous access to false.
Under Environment, I have set Gateway namespace to Active Directory.
The service starts fine.
When I go to Cognos Connection, I am still prompted for my AD login.
I checked I.E. and it have Enable Integrated Windows Authenication checked.
Any ideas what I have missed.
The SSO mechanism is the readout of the remote_user variable being send to the IIS server.
The prompt means that either the content of the remote_user variable does not match the domain name of how the IIS sees is, or you have a proxy server in between confused with the resolving adres.
So:
1. In both the client and the app/webserver member of the same domain?
2. Do you have a proxy server in between?
3. In IE is the website adres added to the local intranet website list?