Cognos 11 certification for ISAM

The customer is looking for this technote to be updated with Cognos Analytics 11.

http://www-01.ibm.com/support/docview.wss?uid=swg24022695

There current configuration is as follows:

onfigured SSO from WebSeal 7.0.0.26 to Cognos v11.0.7 through IHS v8.5.5.4 on RedHat Linux 6.8. Hopefully it can help other people who struggled as I did. If you have any concern, please let us know. Otherwise please confirm your teams will support it in the future.
1. For Web Server – Some WebSeal SSO document said Authentication can be done on WebSeal or on web server or on both. It is true for Cognos v10, but not for Cognos v11. Thanks to John who shown me a working version of cognos.conf, and then I realized in Cognos v11, authentication MUST be done by Web server, which means the location in cognos.conf must be configured to use one valid AuthBasicProvider. For my case it is a remote ldap server.
2. For Cognos server – Cognos v11 only trust the authentication done by web server not from WebSeal. For my case, IHS 8.5 passes the non-SSL credential using REMOTE_USER, so the value for external user mapping in Cognos server config must be “uid=${environment("REMOTE_USER")}”.
3. For WebSeal server – In Cognos v11, the login html is not using Form but use class="wireframe glass", so the FSSO worked in Cognos v10 doesn't work on Cognos v11. For my case, we need to use gso user to login, so after many tries I found the following way to setup our junction –
For Mozilla 5.0 client (e.g. Firefox, Chrome, etc) –
pdadmin -a sec_master -p xxx server task ct-webseald-ctdlwb63 create -t tcp -c iv_user -h ctdlwb63 -p 81 -j -n -r -R -b gso -T reports /ctrp -f
If don't login as gso user, user can remove the options of “-b gso -T reports” when create the junction
For Mozilla 4.0 (e.g. IE 11) – Thanks to Nick who found IE doesn't recognize the cookie default location and contribute the option “-J inhead,xhtml10” to solve the problem -
pdadmin -a sec_master -p xxx server task ct-webseald-ctdlwb63 create -t tcp -c iv_user -h ctdlwb63 -p 81 -j -n -r -R -b gso -T reports -J inhead,xhtml10 /ctrp -f