Single sign-on between IBM® EMM and IBM® Digital Analytics

If your organization uses IBM® Digital Analytics, you can enable single sign-on between IBM® Digital Analytics and IBM® EMM.

Single sign-on allows users to navigate to IBM® Digital Analytics reports from within the IBM® EMM user interface without being prompted to log in.

Also, if IBM® Digital Analytics reports are referenced in IBM® EMM dashboards, single sign-on allows users to view these reports (if they have access to them in IBM® Digital Analytics).

You can choose between two options for enabling single sign-on.

You can configure IBM® Digital Analytics to automatically create an IBM® Digital Analytics user account the first time an IBM® EMM user navigates to IBM® Digital Analytics.

You might want to choose this option if you want all of your IBM® EMM users to have single sign-on with IBM® Digital Analytics.

You can configure IBM® EMM user accounts for single sign-on by adding each user's existing IBM® Digital Analytics login name to his or her detail page in IBM® EMM.

When you choose this option, users who require access to IBM® Digital Analytics must have an IBM® Digital Analytics account.

You might want to choose this option if you want a subset of your IBM® EMM users to have single sign-on with IBM® Digital Analytics.

Permissions in IBM® Digital Analytics for single sign-on users

When the automatic account creation option is not selected in IBM® Digital Analytics, single sign-on users have the permissions in IBM® Digital Analytics that they would have if they log in to IBM® Digital Analytics directly.

When the automatic account creation option is selected in IBM® Digital Analytics, single sign-on users have permissions in IBM® Digital Analytics as follows.

By default, users have the permissions granted to the IBM® Digital Analytics group the administrator has configured for all automatically created users.

In addition, the administrator can override automatic account creation for users who already have a IBM® Digital Analytics account. If the override is in place for a user, that user has the permissions he or she would have when he or she logs in to IBM® Digital Analytics directly.

The clock on the server on which Marketing Platform is deployed must match the time on the IBM® Digital Analytics server clock. For single sign-on, the IBM® Digital Analytics server allows for up to 15 minutes of difference (900 seconds) between server clock times.

As a best practice, you should synchronize server clocks. To ensure synchronization, you should use the Network Time Protocol (NTP).

If you cannot synchronize your server clock, and there might be at least 15 minutes of difference between the clocks, you can set the Clock skew adjustment (seconds) configuration property under the Coremetrics® category in Marketing Platform to a number that reflects the difference between the clocks.