Skip to Main Content
IBM Data and AI Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data & AI organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com


ADD A NEW IDEA

Security

Showing 44 of 15639

Logoff URL Improvements

There are two scenarios that don't seem to be currently supported in relation to the logoff URL that would be very beneficial. If a session times out due to inactivity, it doesn't appear to redirect to the logoff URL, if configured, which can lead...
over 1 year ago in Cognos Analytics / Security 0 Future consideration

Non-Path Traversal for PDF viewer

Corporate Web Application Firewalls consider the use of path traversal syntax to be a security violation. Cognos 11.2.1 uses path traversal to render pdf reports interactively. This violates standard web security implementations.
over 2 years ago in Cognos Analytics / Security 3 Not under consideration

Implement a relying-party backchannel logout URL to allow for Single Signout.

When integrating Cognos elements into a portal, secured against OIDC namespace, it would be helpful if we could employ token-based single-signout from our OIDC provider, rather than having to force the users to log-out manually from Cognos Analyti...
almost 1 year ago in Cognos Analytics / Security 1 Submitted

Should be possible to schedule dataset refresh, reports etc using smartcard login together with Kerberos constrained delegation

Users are using smartcard login to CA. This means no username and pwd are stored in AD. Currently scheduling in CA requires saved credentials (username/pwd). On top of that the system is configured with kerberos constrained delegation. A solution ...
about 3 years ago in Cognos Analytics / Security 0 Not under consideration

Improved Customization Section

Within Cognos you have the ability to setup roles where you can customize what shows and what is hidden from a user. The problem is if a user is in multiple roles, any customizations that have been unchecked will enforce deny no matter what the ro...
over 1 year ago in Cognos Analytics / Security 0 Not under consideration

Implement functionality where characters and text strings mandated by corporate security can be restricted from Report names, and the Search box.

It has been suggested by security auditors that we should restrict the use of special characters, <script> tags, etc., in the search box within Cognos Analytics, or implement a setting which will restrict the use of all special and meta char...
7 months ago in Cognos Analytics / Security 0 Submitted

Json Key Files for Google Big Query Connections have credentials in Clear Text (Not secured)

When creating Google Big Query connection in Cognos Analytics it requires to add the JSON Key file location in the connection string. The JSON key file is stored on the local Cognos dispatchers and the JSON files will have sensitive security infor...
over 1 year ago in Cognos Analytics / Security 0 Future consideration

CIS benchmark guide for Cognos Analytics

We are OEM to IBM Cognos Analytics and our internal security teams expect all product owners to submit CIS (security hardening) guidelines document. I am able to find for DB2 at https://www.cisecurity.org/benchmark/ibm_db2 But I can't find any for...
over 2 years ago in Cognos Analytics / Security 0 Future consideration

Allow passing an id_token_hint into the Logout Redirect URL when logging out of OIDC namespaces

With OpenID Providers such as KeyCloak, it has previously been possible to send a user to their logout URL directly, without providing any token. For example: http://{domain-name}/auth/realms/{realm-name}/protocol/openid-connect/logout?redirect_ur...
9 months ago in Cognos Analytics / Security 0 Submitted

Cognos Analytics Support for AIP (Azure Information Protection)

Azure Information Protection (AIP) is a cloud-based solution that enables organizations to discover, classify, and protect documents and emails by applying labels to content. AIP is part of the Microsoft Information Protection (MIP) solution, and ...
almost 3 years ago in Cognos Analytics / Security 2 Future consideration