IBM Support

How to configure Controller Web to use Cognos (CAM) authentication

Technote (FAQ)


Customer has already configured their main Controller client to use Cognos CAM authentication.
- In other words, they have already performed the tasks inside either the separate Technote 1380097 or 2012534


Refer to official documentation for how to configure Controller Web for CAM authentication.


The following example is based on Controller 10.3.1:

1. Logon to the Cognos Report Server (either Cognos Analytics or Cognos BI)

2. Launch 'Cognos Configuration'

3. Configure CAM authentication. In other words:

  • Create a Cognos CAM security namespace
  • Set 'Anonymous Access' to false:

4. Browse to the report server's installation folder

  • For example, if using Cognos Analytics 11 then by default this is: C:\Program Files\IBM\cognos\analytics

5. Navigate to the subfolder: ....\templates\ps\portal\

6. Create a new text file called: variables_CCRWeb.xml

7. Using NOTEPAD, make the contents of the file as follows:

<CRNenv c_cmd="http://{host_name}:{port_number}/fcm.web/cam_login">
      <param name="cam_passport"/>

IMPORTANT: modify {host_name}:{port_number}appropriately, for example:

<CRNenv c_cmd="http://VMCONT102:9080/fcm.web/cam_login">
      <param name="cam_passport"/>

8. Save changes

9. Logon to the Controller application server (where Controller Web server is installed)

10. Browse to the folder: ...servers\fcm.web

  • TIP: By default, this is here: C:\Program Files\IBM\cognos\ccr_64\fcmweb\wlp\usr\servers\fcm.web

11. Open the following file inside NOTEPAD:

12. Configure the following:
  • biUrl = the URL that the user must go to when CAM authentication is needed
    • Example #1 (Cognos BI using CGI): http://<BI_host>:80/ibmcognos/cgi-bin/cognos.cgi
    • Example #2 (Cognos Analytics without gateway): http://<CA_server>:9300/bi/v1/disp
  • biDispatchEndpoint = the endpoint to which Cognos Controller Web connects to validate CAM users and CAM passports.
    • The default location is http://<BI_host>:9300/p2pd/servlet/dispatch
  • loginMode
    • In this scenario, it should be CAM

Example #1: Cognos BI (using standard gateway)

Example #2: Cognos Analytics (CA) without Gateway

Related information

1380097 - How to configure Controller to use Active Dir
2012534 - How to configure Controller to use Active Dir
Controller 10.3.1 official documentation - Configuring

Document information

More support for: Cognos Controller

Software version: 10.3, 10.3.1

Operating system(s): Windows

Reference #: 2014043

Modified date: 28 February 2018