Setting up single sign-on between IBM® EMM and IBM® Digital Analytics using manual user account creation

Use this procedure to set up single sign-on between IBM® EMM and IBM® Digital Analytics using manual user account creation.

1.	Determine the IBM® Digital Analytics Client ID you want to use for single sign-on between IBM® EMM and IBM® Digital Analytics.

Make a note of the Client ID, as you will need it in a later step.

2.	Log in to IBM® Digital Analytics as an Admin user with access to the Client ID you selected in the previous step, click the Admin link, and navigate to the Global User Authentication page.

In the IBM Enterprise Marketing Management Shared Secret field, enter a string that conforms to the rules stated in the instructions next to the field.

Make a note of this string, as you will need it in a later step.

Under Automatic User Account Creation, click Disabled.

3.	Log in to IBM® EMM as an Admin user and navigate to the Settings > Users page.

4.	Select or create a user and configure a data source for this user as follows.

Data Source - Enter a name.

Data Source Login - Enter the Client ID you noted in step 1.

Data Source Password - Enter the Shared Secret you noted in step 2.

If you have multiple partitions, you must perform this task in every partition where you have users who should have single sign-on.

Alternatively, you can use the platform_admin user account for this step. Because this user is a member of all partitions, the data source is available in all partitions.

5.	In Marketing Platform, navigate to the Settings > User Groups page and do the following.

Create a new group and add the DMUser role to that group.

Make each user who should have single sign-on a member of that group.

If you have multiple partitions, you must perform this task in every partition where you have users who should have single sign-on.

6.	In Marketing Platform, navigate to the Settings > Configuration page and set configuration properties as follows.

Configuration properties for enabling single sign-on with IBM® Digital Analytics
Property	Value
Digital Analytics \| Enable IBM Digital Analytics	True
Digital Analytics \| Integration \| partitions \| partition[n] \| Platform user for IBM Digital Analytics account	Enter the login name for Marketing Platform user account that you used in step 4.
Digital Analytics \| Integration \| partitions \| partition[n] \| Datasource for IBM Digital Analytics account	Enter the name of the data source you created in step 4.

If you have multiple partitions, you must use the Digital Analytics | Integration | partitions | partitionTemplate to create a set of configuration properties for every partition where you have users who should have single sign-on.

The name of the category you create with the template must exactly match the name of the corresponding Campaign partition.

7.	In Marketing Platform, navigate to the Settings > Users page.

8.	For each user for whom you want to enable single sign-on, enter that user's IBM® Digital Analytics login name in the Digital Analytics Username field on the user's Edit Properties page.

If a user has exactly the same login names in both IBM® EMM and IBM® Digital Analytics, you do not have to perform this step.

9.	Perform the procedure described in Configuring WebLogic for single sign-on between IBM Digital Analytics and IBM EMM or Configuring WebSphere for single sign-on between IBM Digital Analytics and IBM EMM.