Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x

1. The Webinar will begin at 12:00pm Eastern Audio – Webinar is using Webex Integrated Voice, ensure that your speakers are on! Rich Chester Director of Consulting John Antonucci Senior Business Development Manager Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x

2. LPA Systems, Inc.- Proprietary About LPA Systems • Founded in 2001 • IBM Business Analytics Partner since 2002 • Specialty practice for IBM ASL Partner Enablement • IBM Cognos ASL Team Strategic Implementation Partner • Over 50 IBM ASL/OEM clients • IBM Cognos Business Analytics Credentials • IBM Premier Business Analytics Partner • IBM Cognos-focused BI consultancy • IBM Cognos Service “Core” Subcontractor Partner • Member of the IBM Cognos Partner Advisory Board • Extensive IBM Cognos consulting and product experience • LPA BI Consultants have an average experience of 10+ years • Series 7, Cognos 10 & 8 BI Suite, TM1 • Frequent IBM Business Analytics Beta Test participant (including 10.2.1) • Professional services partner for several Cognos ASL Partners • Committed to customer success and self-sufficiency

3. Flexible ASL Lifecycle Services Approach • Go-to-Market Support • Professional services project scoping • Customized Training • Project management • ASL-Branded BI Service Offerings • Design & Architecture • Project Scoping Workshop • C10 Solution Architecture • Integration assessment • Data Sourcing • Migration assistance • Product roadmap and release planning • Cognos proven practices LPA Solution Architect • Development & Integration • Custom authentication • Single sign-on • Metadata Design • Multi-Tenancy • Dashboards and analytics • Data marts • Integration using SDK • Branding and customization • Portal integration • Automation • Best practices • Knowledge Transfer & Pre-Sales Support • Best Practices • Internal training • Tuning & troubleshooting • Mentoring • Knowledge Transfer • Sales demos • Trade show support Knowledge Transfer

4. Value Proposition for ASL Partners • Significant experience in helping over 50 IBM Cognos OEM/ASL partners accelerate their solution time-to-market • Familiar with the special challenges faced by OEM/ASL clients: • On-Premise, On-Demand and hybrid delivery models • Complex custom security provider • Multi-tenanted data modeling and complex report development • Rebranding, integration and automation • Deployment strategy and go-to-market assistance • High impact consultants with depth and breadth of product, industry and project experience • A flexible, phased implementation approach that is focused on delivering measurable business value within small time-boxes • The end goal is for OEM/ASL partner to own the solution • A SDLC “Lifecycle Approach” for delivering flexible service through all phases of the OEM/ASL project lifecycle • Close coordination with the Cognos ASL sales and technical teams • Proven OEM/ASL services delivery methodology

5. LPA Cognos Offerings for ASL Partners

6. IOD 2013 Early Bird: $1,895 USD per person – July 12 – September 13 Standard Fee: $2,195 USD per person - September 14 November 7 Save $400: Register for IOD 2013 with LPA Just enter our promo code: G13LPASYS 

7. Agenda • What is a Multi-Tenant Implementation? • Specifying Tenant Properties • Enabling Multi-Tenancy in Cognos Configuration • Options for communicating Tenant ID at login • Object Security • Tenant Administration • Quick Demonstration • Questions & Answers

8. What is a Cognos Multi-Tenant Implementation? • A single instance of IBM Cognos serving multiple client organizations • One IBM Cognos Content Store • Data may or may not be co-mingled in source databases • Cognos objects (folders, reports, data source connections...) may be private to a single tenant or public to all tenants • Prior to Cognos 10.2 was implemented using Group and Role security schemes Tenant 1 Tenant 2 Tenant 3 Your User Interface or IBM Cognos Connection Data Source Data Source Content Store Data Source Data Source Public Tenant 2 Tenant 3 Tenant 3 Tenant 1 Tenant 2 Tenant 1 Tenant 2 Tenant 1 Tenant 3

9. Specifying Tenancy on Objects • With IBM Cognos 10.2.0 an optional new property was introduced: Tenant ID • An object with no tenant id specified is considered “public” and available to all tenants • An object with a tenant id specified is considered private to that tenant • Only zero or one tenant id can be specified on an object • Available on nearly every object in IBM Cognos Connection • When placed on a container (ex: folder, package) all objects in the container inherit and cannot be overridden

10. Enabling Multi-Tenancy On each 10.2.x Content Manager server: • Run IBM Cognos Configuration • Setup “Advanced Properties” specifying how Tenant ID will be supplied at login • Restart Services

11. Options for specifying Tenant Id - Ancestors Option 1: Use the position of a user within the Ancestors Hierarchy • is auto-populated by LDAP or Active Directory • is created within your Custom Authentication Provider

12. Options for specifying Tenant Id - Properties Option 2: Use a mapped property or parameter • Map a specific account attribute from your authentication provider (ex: account.personalInfo.xxxxxx) • LDAP and AD Users: This method may require that you identify additional properties to be queried during the user authentication process in the “Custom properties” property for your namespace

13. Options for specifying Tenant Id – Custom App Option 3: Create a custom Java application that is invoked during the user authentication process • Uses the IBM Cognos SDK • A sample program is provided with the SDK install • Returns a string given an account object • May derive the tenant information from account information directly, or can retrieve tenant mappings from an external source • This is not your Custom Authentication Provider (and if you have a CAP you would not use this method)

14. Set Globally or by Namespace

15. Object Security in IBM Cognos Connection Data Source: Data Source Signon: Folder: Package: Public Private

16. Implications after applying Tenant ID • System Administrators can see all content, both public and tenant-specific • There is no provision for individual Tenant-specific system administrators • Once a Tenant ID is set on an object, children of the parent object cannot be public or set to a different Tenant ID • Users have the potential to see and use all public objects and those objects associated with their Tenant Id • A user must still have permission to access an object (read, write, execute, traverse, set policy) • Tenant ID security is in addition to object security implemented on the Permissions tab

17. Framework Manager • Framework Manager session parameters include tenantID • For example, you could use the TenantID parameter to filter Query Subjects in co-mingled data source situations • If you mapped a parameter from your security provider (Option 2) to provide the Tenant ID, that parameter is also available

18. IBM Cognos Administration Multitenancy Tab • New Multitenancy tab in IBM Cognos 10.2.1 • Onboard new tenants • Delete a tenant • Enable/Disable logins • Terminate active sessions • Manage default user profiles

19. Demonstration

20. Questions?

21. How LPA Can Help IBM Cognos, SPSS, & FPM • Healthcare Solutions for Clinical Reporting and Service Line Reporting • IBM Software Licensing and IBM Support Renewals • Needs Assessment and Business Case Justification • Solution Architecture, Design & Implementation • Migrations and Upgrades • Performance Tuning and Troubleshooting • Metadata Development • Report and Dashboard Development • SDK and Custom Authentication Provider • Training Solutions Data Warehouse • Full Project Lifecycle • Supplemental Resources • Specialized Skills (Data Manager, SSIS and others)

22. Do to unforeseen problems, we will need to cancel today’s webinar which will be resceduled.