Enhanced Multi-Tenancy Features in IBM Cognos 10.2.x Rich Chester Director of Consulting John Antonucci Senior Business Development Manager The Webinar will begin at 12:00pm Eastern Audio – Webinar is using Webex Integrated Voice, ensure that your speakers are on!

LPA Systems Confidential2 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 2 Cognos 10.2.x Multi-Tenancy About LPA Systems »Founded in 2001 IBM Business Analytics Partner since 2002 Specialty practice for IBM ASL Partner Enablement –IBM Cognos ASL Team Strategic Implementation Partner –Over 50 IBM ASL/OEM clients »IBM Cognos Business Analytics Credentials IBM Premier Business Analytics Partner IBM Cognos-focused BI consultancy IBM Cognos Service “Core” Subcontractor Partner Member of the IBM Cognos Partner Advisory Board »Extensive IBM Cognos consulting and product experience LPA BI Consultants have an average experience of 10+ years Series 7, Cognos 10 & 8 BI Suite, TM1 Frequent IBM Business Analytics Beta Test participant (including ) »Professional services partner for several Cognos ASL Partners »Committed to customer success and self-sufficiency LPA Systems, Inc.- Proprietary 2

LPA Systems Confidential3 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 3 Cognos 10.2.x Multi-Tenancy Design & Architecture  Project Scoping Workshop  C10 Solution Architecture  Integration assessment  Data Sourcing  Migration assistance  Product roadmap and release planning  Cognos proven practices Development & Integration  Custom authentication  Single sign-on  Metadata Design  Multi-Tenancy  Dashboards and analytics  Data marts  Integration using SDK  Branding and customization  Portal integration  Automation  Best practices Knowledge Transfer & Pre-Sales Support  Best Practices  Internal training  Tuning & troubleshooting  Mentoring  Knowledge Transfer  Sales demos  Trade show support Go-to-Market Support  Professional services project scoping  Customized Training  Project management  ASL-Branded BI Service Offerings LPA Solution Architect Knowledge Transfer Flexible ASL Lifecycle Services Approach

LPA Systems Confidential4 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 4 Cognos 10.2.x Multi-Tenancy Value Proposition for ASL Partners »Significant experience in helping over 50 IBM Cognos OEM/ASL partners accelerate their solution time-to-market »Familiar with the special challenges faced by OEM/ASL clients: On-Premise, On-Demand and hybrid delivery models Complex custom security provider Multi-tenanted data modeling and complex report development Rebranding, integration and automation Deployment strategy and go-to-market assistance »High impact consultants with depth and breadth of product, industry and project experience »A flexible, phased implementation approach that is focused on delivering measurable business value within small time-boxes The end goal is for OEM/ASL partner to own the solution »A SDLC “Lifecycle Approach” for delivering flexible service through all phases of the OEM/ASL project lifecycle »Close coordination with the Cognos ASL sales and technical teams »Proven OEM/ASL services delivery methodology

LPA Systems Confidential5 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 5 Cognos 10.2.x Multi-Tenancy LPA Cognos Offerings for ASL Partners OfferingIncludes ASL Environment Review Troubleshoot, diagnose, and remediate problems and performance issues with existing ASL deployments. Cognos 10.2 Upgrade Strategy & Planning Advisory Service for OEM/ASL Partners Upgrade and Product Release Plan, Creation of a 10.2 “sandbox” Environment, Validation of key components and selected content, Prototype new 10.2 Capabilities, Knowledge Transfer / Training Cognos 10.2 Training Onsite 2 day training to bring Staff up to speed quickly on all new 10.2 Capabilities OLAP Strategy & Planning Advisory Service for OEM/ASL Partners Defined OLAP Strategy and Product Release plan, prototype OLAP Model with your data, defined ROI for the introduction of OLAP to your business, Training Plan Cognos Workspace Strategy & Planning Advisory Service for OEM/ASL Partners Defined Workspace Strategy, Implementation Plan, Product Release Plan, prototype Workspace with your data, Training Plan

LPA Systems Confidential6 IOD 2013 Save $400: Register for IOD 2013 with LPA Just enter our promo code: G13LPASYS Early Bird: $1,895 USD per person – July 12 – September 13 Standard Fee: $2,195 USD per person - September 14 November 7

LPA Systems Confidential7 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 7 Cognos 10.2.x Multi-Tenancy »What is a Multi-Tenant Implementation? »Specifying Tenant Properties »Enabling Multi-Tenancy in Cognos Configuration »Options for communicating Tenant ID at login »Object Security »Tenant Administration »Quick Demonstration »Questions & Answers Agenda

LPA Systems Confidential8 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 8 Cognos 10.2.x Multi-Tenancy What is a Cognos Multi-Tenant Implementation? »A single instance of IBM Cognos serving multiple client organizations One IBM Cognos Content Store Data may or may not be co-mingled in source databases Cognos objects (folders, reports, data source connections...) may be private to a single tenant or public to all tenants Prior to Cognos 10.2 was implemented using Group and Role security schemes Your User Interface or IBM Cognos Connection Tenant 1Tenant 3Tenant 2 Content Store PublicTenant 1Tenant 2 Tenant 3 Data Source Tenant 1Tenant 2 Tenant 3 Data Source Tenant 1 Tenant 2 Tenant 3 Data Source Data Source

LPA Systems Confidential9 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 9 Cognos 10.2.x Multi-Tenancy Specifying Tenancy on Objects »With IBM Cognos an optional new property was introduced: Tenant ID An object with no tenant id specified is considered “public” and available to all tenants An object with a tenant id specified is considered private to that tenant Only zero or one tenant id can be specified on an object Available on nearly every object in IBM Cognos Connection When placed on a container (ex: folder, package) all objects in the container inherit and cannot be overridden

LPA Systems Confidential10 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 10 Cognos 10.2.x Multi-Tenancy Enabling Multi-Tenancy On each 10.2.x Content Manager server: 1.Run IBM Cognos Configuration 2.Setup “Advanced Properties” specifying how Tenant ID will be supplied at login 3.Restart Services

LPA Systems Confidential11 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 11 Cognos 10.2.x Multi-Tenancy Options for specifying Tenant Id - Ancestors Option 1: Use the position of a user within the Ancestors Hierarchy »is auto-populated by LDAP or Active Directory »is created within your Custom Authentication Provider AncestorHierarchyLDAP ExampleCAP Example ancestors[0]Directory node Any array element can hold the Tenant ID ancestors[1]Namespace IDBase DN ancestors[2]Tenant grouping such as a folder Organizational units

LPA Systems Confidential12 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 12 Cognos 10.2.x Multi-Tenancy Options for specifying Tenant Id - Properties Option 2: Use a mapped property or parameter »Map a specific account attribute from your authentication provider (ex: account.personalInfo.xxxxxx) »LDAP and AD Users: This method may require that you identify additional properties to be queried during the user authentication process in the “Custom properties” property for your namespace

LPA Systems Confidential13 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 13 Cognos 10.2.x Multi-Tenancy Options for specifying Tenant Id – Custom App Option 3: Create a custom Java application that is invoked during the user authentication process »Uses the IBM Cognos SDK A sample program is provided with the SDK install »Returns a string given an account object »May derive the tenant information from account information directly, or can retrieve tenant mappings from an external source »This is not your Custom Authentication Provider (and if you have a CAP you would not use this method)

LPA Systems Confidential14 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 14 Cognos 10.2.x Multi-Tenancy Set Globally or by Namespace

LPA Systems Confidential15 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 15 Cognos 10.2.x Multi-Tenancy Data Source:Data Source Signon: Folder:Package: Object Security in IBM Cognos Connection Public Private

LPA Systems Confidential16 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 16 Cognos 10.2.x Multi-Tenancy Implications after applying Tenant ID »System Administrators can see all content, both public and tenant- specific There is no provision for individual Tenant-specific system administrators »Once a Tenant ID is set on an object, children of the parent object cannot be public or set to a different Tenant ID »Users have the potential to see and use all public objects and those objects associated with their Tenant Id A user must still have permission to access an object (read, write, execute, traverse, set policy) Tenant ID security is in addition to object security implemented on the Permissions tab

LPA Systems Confidential17 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 17 Cognos 10.2.x Multi-Tenancy Framework Manager »Framework Manager session parameters include tenantID For example, you could use the TenantID parameter to filter Query Subjects in co-mingled data source situations If you mapped a parameter from your security provider (Option 2) to provide the Tenant ID, that parameter is also available

LPA Systems Confidential18 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 18 Cognos 10.2.x Multi-Tenancy IBM Cognos Administration Multitenancy Tab »New Multitenancy tab in IBM Cognos Onboard new tenants Delete a tenant Enable/Disable logins Terminate active sessions Manage default user profiles

LPA Systems Confidential19 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 19 Cognos 10.2.x Multi-Tenancy Demonstration

LPA Systems Confidential20 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 20 Cognos 10.2.x Multi-Tenancy Questions?

LPA Systems Confidential21 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 21 Cognos 10.2.x Multi-Tenancy How LPA Can Help IBM Cognos, SPSS, & FPM »Healthcare Solutions for Clinical Reporting and Service Line Reporting »IBM Software Licensing and IBM Support Renewals »Needs Assessment and Business Case Justification »Solution Architecture, Design & Implementation »Migrations and Upgrades »Performance Tuning and Troubleshooting »Metadata Development »Report and Dashboard Development »SDK and Custom Authentication Provider »Training Solutions Data Warehouse »Full Project Lifecycle »Supplemental Resources »Specialized Skills (Data Manager, SSIS and others)

LPA Systems Confidential22 What’s New in IBM Cognos BI 10.2? LPA Systems, Inc.- Proprietary 22 Cognos 10.2.x Multi-Tenancy »Do to unforeseen problems, we will need to cancel today’s webinar which will be resceduled.