Security

Showing 13

Custom Authentication should be able to be debuged.

Currently if you try to debug a Custom Authentication Provider it is slow and unable. This is related to the Websphere Liberty addion. Some one in dev needs to look to see how to set this up so when trying to debug is not completly unusable. Also ...

1 day ago in Cognos Analytics / Security 0 Submitted

3 VOTE

Add support for ssl key lengths greater than 2048 bit

Cognos Analytics currently supports a maximum key length of 2048 bit for ssl certificates. The limit seems to derive from the ThirdPartyCertificateTool, but might affect the whole ecosystem including Planning Analytics, PAW and Jupyter Notebook Se...

30 days ago in Cognos Analytics / Security 0 Submitted

2 VOTE

Hide option for dispatcher URL from past activities under My Schedules and Subscriptions

My Schedules and Subscriptions menu item is typically allowed for all consumer users with scheduling capability. Under Past activities window, report run details shows target dispatcher (URL) report run against, which shows app server name/IP and ...

29 days ago in Cognos Analytics / Security 0 Submitted

4 VOTE

Implement functionality where characters and text strings mandated by corporate security can be restricted from Report names, and the Search box.

It has been suggested by security auditors that we should restrict the use of special characters, <script> tags, etc., in the search box within Cognos Analytics, or implement a setting which will restrict the use of all special and meta char...

6 months ago in Cognos Analytics / Security 0 Submitted

2 VOTE

Cognos REST API - Permission check that only displaying the folders/items the logged in user has permissions to view.

Via de Cognos REST API - The call: api/v1/content/team_folders/itemslogged on as a specific user with a security token, you always see all the folders of present. It is not limited for the folders that the user has access to.

4 months ago in Cognos Analytics / Security 0 Submitted

1 VOTE

Warning message before session time-out.

Users do not get prompted that their session may be about to time out. Adding a warning similar to Bank websites that warn you your session is about to end. We could for example provide the user the opportunity to save work, extend the session, or...

4 months ago in Cognos Analytics / Security 0 Submitted

2 VOTE

Support for Cognos Analytics to be in-line with Chrome's security changes to cookie handling

https://developers.google.com/privacy-sandbox/blog/cookie-countdown-2023oct?hl=en As per the above article, Google aims to make a change in Chrome to restrict cookies when used as a third-party. This impacts Cognos as Cognos is often used by enter...

9 months ago in Cognos Analytics / Security 0 Submitted

2 VOTE

Implement a relying-party backchannel logout URL to allow for Single Signout.

When integrating Cognos elements into a portal, secured against OIDC namespace, it would be helpful if we could employ token-based single-signout from our OIDC provider, rather than having to force the users to log-out manually from Cognos Analyti...

11 months ago in Cognos Analytics / Security 1 Submitted

1 VOTE

Implement functionality where characters and text strings mandated by corporate security can be restricted from Report names, and the Search box.

6 months ago in Cognos Analytics / Security 0 Submitted

1 VOTE

Allow passing an id_token_hint into the Logout Redirect URL when logging out of OIDC namespaces

With OpenID Providers such as KeyCloak, it has previously been possible to send a user to their logout URL directly, without providing any token. For example: http://{domain-name}/auth/realms/{realm-name}/protocol/openid-connect/logout?redirect_ur...

8 months ago in Cognos Analytics / Security 0 Submitted

Please enter your email address

FILTER BY CATEGORY