Troubleshooting
Problem
Customer is trying to configure Single SignOn (SSO) for Cognos connections. User launches Cognos Connection website. User receives an error message.
Symptom
HTTP 401 Unauthorized: Access is denied due to invalid credentials Webserver Message Page
Cause
IIS server's Windows Authentication method does not have the proper Provider configured (or installed).
Environment
Microsoft Windows Internet Information Server 7 (IIS7.5 only), where the Cognos virtual directory has:
- Anonymous Authentication disabled (turned off)
- Windows Authentication is enabled (turned on).
Diagnosing The Problem
First of all, verify that users can log in with Username and Password first without using SSO. Also check the web server is 'trusted for delegation' in its properties box in Active Directory if you are using Kerberos Authentication.
- Afterwards, check the Windows Authentication Provider setting (for the correct provider being installed).
Resolving The Problem
Confirm the IIS providers.
Steps:
The following steps are based on IIS 7.5:
- Open the Windows IIS Manager from Administration Tools.
- Select the Cognos Virtual Directory (cgi-bin).
- Select the Authentication icon under IIS settings.
- Ensure Anonymous Authentication is disabled.
- Select Windows Authentication.
- Select Providers... (under Actions on the right).
- If Negotiate is missing from the list, select from drop down prompt.
- Click the Add button then click the Okay button.
- Stop / Start the Default Website.
If the above does not solve the problem, then:
10. Also check the web server is 'trusted for delegation' in its properties box in AD.
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg21461142