CDM Identity Providers

CDM provides a modern authentication experience, as well as adding support for the OpenID Connect, SAML 2.0, and WS-Federation protocols (CDM Identity Providers). CDM authentication is integrated with Identity Providers that support authentication flows using the previously named protocols, in effect: Microsoft Azure AD, Microsoft AD FS, IBM ID, and so on.

Certified Identity Providers and Protocols

Certent's default and preferred protocol is OpenID Connect for all providers.

While these protocols are standard, each provider has options for implementations. As such, Certent cannot guarantee all provider/protocol combinations will work. For providers or protocols not identified here, you can still attempt to connect and have success. However, if you are unsuccessful, contact Certent to assess the viability of certifying that provider/protocol with you.

Classic CDM AD/LDAP Authentication Import Sources

The classic CDM AD/LDAP Authentication Import Sources (CDM Authentication Import Sources) are seamlessly supported after upgrading to CDM 19.12.1.

At any time, a CDM application owner can choose to convert a CDM AD/LDAP Authentication Import Source to a modern CDM Identity Provider. Once that happens, the CDM users will authenticate through the familiar corporate authentication form. For a detailed procedure on how to achieve this, contact Certent CDM Support.

Classic CDM IBM Cognos Access Manager and IBM ID Authentication Import Sources

The classic CDM IBM Cognos Access Manager (CAM) and IBM ID Authentication Import Sources are no longer supported.

• Before upgrading to CDM 19.12.1, CDM users must be temporarily converted to native CDM users.
• After upgrading to CDM 19.12.1, CDM authentication can be integrated with IBM ID using OpenID Connect or the underlying Identity Provider using the appropriate protocol. Direct integration with IBM CAM is no longer supported.

Once configured, users will authenticate using the familiar IBM CAM or IBM ID authentication form.