Learn how to transition from one Cognos authentication source to another. View the webinar video recording and this deck: http://www.senturus.com/resources/migrating-a-cognos-instance-between-authentication-sources/. Migrating a Cognos instance between authentication sources can be a scary experience, it's not as simple as moving from point A to point B. A namespace transition can have a profound effect on your Cognos environment's content and configuration. Senturus, a business analytics consulting firm, has a resource library with hundreds of free recorded webinars, trainings, demos and unbiased product reviews. Take a look and share them with your colleagues and friends: http://www.senturus.com/resources/.

1. Migrating a Cognos Instance between
Authentication Sources
with Motio
www.senturus.com
Helping Companies Learn From the Past, Manage the
1 Present and Shape the Future

2. This slide deck is part of a recorded webinar.
To view the FREE recording of this entire
presentation and download the slide deck, go to
info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with-
Motio.html
The Senturus library has 50 other recorded webinars on
assorted Cognos and BI topics which may interest you.
Go to the recorded resources
2

3. Agenda
• Welcome and Introduction
• Common Migration Scenarios & Challenges
• Demonstration
• Next Steps
• Q&A
3

4. Presenters Today
Jim Frazier Steve Reed-Pittman Lance Hankins
Senturus Senturus Motio
Vice President, Sales Consultant Chief Technology
Officer
4

5. Who is Senturus ?
• Consulting firm specializing in Corporate Performance
Management
– Business Intelligence
– Tools of the Office of Finance
• Enterprise planning & budgeting
• Consolidate, close, report and file (CCRF)
– San Francisco Business Times Hall of Fame -- Four
consecutive years in Fast 100 list of fastest-growing
private companies in the Bay Area
• Experience
– 13-year focus on performance management
– More than 1,200 projects for 650+ clients
• People
– Business depth combined with technical expertise.
Former CFOs, CIOs, Controllers, Directors...
– DBAs with MBAs
5

6. A few of our 650+ Clients
6

7. Motio Products
Cognos Administration & Control
Improve/Optimize
Integrate/Extend IBM Cognos Cognos Security Migration
Cognos Content
7

8. History of Motio
2010
2005 2008
Founded
1999 2012
201 2012
200 2006
0
3
2009
2005
Air
8

9. This slide deck is part of a recorded webinar.
To view the FREE recording of this entire
presentation and download the slide deck, go to
info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with-
Motio.html
The Senturus library has 50 other recorded webinars on
assorted Cognos and BI topics which may interest you.
Go to the recorded resources
9

10. Common Migration Scenarios
& Challenges
10

11. Common Migration Scenarios
1) Access Manager (SunONE LDAP) -> Active Directory
2) Access Manager (SunONE LDAP) -> newer LDAP
(e.g., Oracle Directory Server, IBM Directory Server)
3) Migration of users between Active Directory domains
11

12. The Namespace Migration Challenge
What do all of the namespace migration scenarios shown in the
previous slide have in common?
They break your existing Cognos security configuration.
To understand why, we need a quick primer on
how Cognos manages its internal security IDs (called CAMIDs)…
12

13. Jones, Bob CAMID(“S7:4001”)
Smith, Alex CAMID(“S7:4002”)
…
Series 7 Dallas Branch CAMID(“S7:4851”)
Access NYC Branch CAMID(“S7:4852”)
Manager
Users, Groups & Roles
from the external security
Cognos source are identified in
Cognos by their CAMIDs.
Content Data
Data
Store Source
Source
13
Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending

14. Jones, Bob CAMID(“S7:4001”)
Smith, Alex CAMID(“S7:4002”)
…
Series 7 Dallas Branch CAMID(“S7:4851”)
Access NYC Branch CAMID(“S7:4852”)
Manager
There are many CAMID
References in the Content Store:
Authenticates against,
• Every security policy
Exposes users / roles from
• Every object’s owner
• Every object’s contact
• Schedules Depending on
• Schedule Recipients security
• Burst Slices Cognos requirements, CAMID
• Cognos Namespace References may also
Membership exist in Models:
• Each User & their Content
• My Folders Framework
• Preferences Models
• Portal Tabs
• Watch Items
Content
Transformer
Store Models
14
Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending

15. Active Jones, Bob CAMID(“S7:4001”)
LDAP
Directory Smith, Alex CAMID(“S7:4002”)
…
Series 7 Dallas Branch CAMID(“S7:4851”)
So what happens if Access NYC Branch CAMID(“S7:4852”)
you need to switch
Manager
Cognos to use a
different external
Security Source ?
Jones, Bob CAMID(“AD:B3FF”)
Smith, Alex CAMID(“AD:11F1”)
…
Cognos Dallas Branch CAMID(“AD:44EF”)
NYC Branch CAMID(“AD:F84A”)
Content Unfortunately, this
causes all of the
Store CAMIDs to change!!!
15
Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending

16. Security Policies Jones, Bob CAMID(“S7:4001”)
BEFORE
All of the old CAMID Smith, Alex CAMID(“S7:4002”)
References on …
Security Policies are
now Invalid. Dallas Branch CAMID(“S7:4851”)
NYC Branch CAMID(“S7:4852”)
Jones, Bob CAMID(“AD:B3FF”)
Smith, Alex CAMID(“AD:11F1”)
…
Dallas Branch CAMID(“AD:44EF”)
AFTER
NYC Branch CAMID(“AD:F84A”)
These group
references now show
as “Unavailable”,
Since their CAMIDs
have changed
Copyright 2012, Motio, Inc. All Rights Reserved. Patent
Pending

17. Let’s recap.... Active
LDAP
Directory
Re-configuring Cognos to use a different
external security source invalidates all of the
old CAMIDs, creating a mess in the Content Series 7
Store. Access
Manager
What are some options for handling this problem?
1. Manual re-mapping in Cognos Connection
2. Write custom code using the Cognos SDK
3. Packaged namespace migration solutions (Motio)
17
Copyright 2012, Motio, Inc. All Rights Reserved. Patent Pending

18. This slide deck is part of a recorded webinar.
To view the FREE recording of this entire
presentation and download the slide deck, go to
info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with-
Motio.html
You will find this—and many other recorded webinars-- under the “IBM Cognos
Business Intelligence”
18

19. Demonstration of Motio Solution
19

20. ™+
Persona / IQ
Namespace Migration
Product Briefing
Webinar
February 13th, 2013
COPYRIGHT 2013, MOTIO, INC – ALL RIGHTS RESERVED,

21. Migration Solution Overview
• Motio has two solutions for solving this
problem
– Option #1 : Persona IQ
• Overview of Product Functionality
• Product Demonstration
– Option #2 : Namespace Migration Service
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

22. Option #1 : Persona IQ™
• Key Highlights
– Migrate between Cognos Authentication Sources :
– WITHOUT changing the CAMIDs of users, groups & roles
– Supports Migrating From / To :
– Access Manager
– Active Directory
– LDAP
– Persona IQ
– Requires less than five minutes of Cognos downtime.
– ZERO changes to the Cognos Content Store or FM / Transformer
Models
– Empowers application support personnel while still adhering to
corporate authentication standard
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

23. … but you want Cognos is
LDAP or Cognos to point currently
Active HERE instead. pointed HERE. Jones, Bob CAMID(“S7:4001”)
Directory Smith, Alex CAMID(“S7:4002”)
…
Imports From Existing Dallas Branch CAMID(“S7:4851”)
Security NYC Branch CAMID(“S7:4852”)
Source
Authenticates against,
Persona Exposes users / roles from
Persona Cognos
DB Imports From
Framework
Models
Content Data
Data
Store Source
Transformer Source
Models
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

24. … but you want Cognos is
LDAP or Cognos to point currently
Active HERE instead. pointed HERE.
Jones, Bob CAMID(“S7:4001”)
Directory
Smith, Alex CAMID(“S7:4002”)
…
Imports From Existing
Security Dallas Branch CAMID(“S7:4851”)
Source NYC Branch CAMID(“S7:4852”)
Authenticates against,
Persona Exposes users / roles from
…after the transition, all
users, groups & roles from
Persona Cognos the original provider are
DB Imports From available through Persona
with the exact same CAMIDs
as before.
Framework
Models
Content Data
Data
Store Source
Transformer Source
Models
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

25. LDAP or
Active
Jones, Bob CAMID(“S7:4001”)
Directory
Smith, Alex CAMID(“S7:4002”)
Jones, Bob Dallas Branch imported accounts are
The CAMID(“S7:4851”)
Persona
associated with their Active
Smith, Alex DB NYC Branch Directory counterparts, but
CAMID(“S7:4852”)
still exposed to Cognos with
… their previous CAMID.
…after the transition, all
users, groups & roles from
Cognos the original provider are
available through Persona
with the exact same CAMIDs
as before.
Framework
Models
Content Data
Data
Store Source
Transformer Source
Models
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

26. LDAP or
Active
Jones, Bob CAMID(“S7:4001”)
Directory
Smith, Alex CAMID(“S7:4002”)
In this example, Bob and
Jones, Bob Dallas Branch CAMID(“S7:4851”)
Alex are associated with
Persona their Active Directory
Smith, Alex DB NYC Branch CAMID(“S7:4852”)
Accounts, but still exposed
… to Cognos with their
previous CAMID.
login
Cognos
Cognos users can now
login using their AD or
LDAP credentials.
Their CAMID remains
Framework the same as before.
Models
Content Data
Data
Store Source
Transformer Source
Models
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

27. LDAP or
Active
Jones, Bob CAMID(“S7:4001”)
Directory
Smith, Alex CAMID(“S7:4002”)
Jones, Bob Dallas Branch CAMID(“S7:4851”)
Persona
Smith, Alex DB NYC Branch CAMID(“S7:4852”)
…
No CAMID changes
means: login
ZERO changes Cognos
Cognos users can now
required here!
login using their AD or
LDAP credentials.
Their CAMID remains
Framework the same as before.
Models
Content Data
Data
Store Source
Transformer Source
Models
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

28. This slide deck is part of a recorded webinar.
To view the FREE recording of this entire
presentation and download the slide deck, go to
info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with-
Motio.html
The Senturus library has 50 other recorded webinars on
assorted Cognos and BI topics which may interest you.
Go to the recorded resources
28

29. Product Demo
Demo Scenario:
• Migrate Cognos 10.1 Instance from Access
Manager to Active Directory.
– There are some active Access Manager accounts
which do NOT exist in Active Directory
COPYRIGHT 2013, Motio, Inc. All Rights Reserved. Patent Pending

30. Option #2: Motio Namespace
Migration Service
• Technology assisted
service
• Proven Methodology

31. Source
Namespace
Target
Namespace

32. Mapping Users
from Series7 Namespace
to Active Directory Namespace
Source Target
Namespace Namespace

34. Namespace Migration Service - In
Summary
• Technology assisted service
• Proven methodology
• Automates a time-intensive process
• Reduces Risk
"Migrating eighty five thousand objects manually would
have taken us several months with several service
disruptions to our end users. Motio's Namespace
Migration streamlined this process and allowed us to
successfully migrate eighty five thousand objects from
Open LDAP to a Corporate LDAP server within just a few
hours. Thank you Motio!"
Avi Badwal
Business Intelligence Manager
University of San Diego ITS-EASS

35. Want to explore further?
• More inquires?
• Need assistance?
Jim Frazier
jfrazier@senturus.com
650.949.2921
35

36. This slide deck is part of a recorded webinar.
To view the FREE recording of this entire
presentation and download the slide deck, go to
info.senturus.com/2013-02-13-Stress-Free-Cognos-Migrations-with-
Motio.html
The Senturus library has 50 other recorded webinars on
assorted Cognos and BI topics which may interest you.
Go to the recorded resources
36

37. Helping Companies Learn From the Past, Manage the
Present and Shape the Future
www.senturus.com
888.601.6010
info@senturus.com
Copyright 2013 Senturus, Inc. This presentation may not
be used without permission from Senturus, Inc.
37

38. 38