IBM Support

TM1Web/ IBM PA Spreadsheet Service SameSite Cookie Handling

Troubleshooting


Problem

TM1Web components can no longer be set up on a different domain and work within an external application or custom html page which is using components sourced from TM1Web via iFrame using the TM1Web URL API.  Rather than rendering the TM1Web content the iFrame displays a "session timed out" error message.

Symptom

Since February 2020, starting with Chrome, the default behaviour with third-party cookies has changed.
 
This means that any site that is not in the same domain that wishes to appear in an iFrame, will need to set their cookies as “SameSite=None; Secure” to restore previous functionality.
This behaviour is considered to be a security improvement in the browser.  We do not recommend changing the SameSite cookie settings without understanding the risk.

Resolving The Problem

Cookie settings for TM1Web service can be changed in <tm1web_install>/wlp/usr/servers/tm1web/server.xml:
  -Add the cookieSameSite attribute: <httpSession cookieSameSite="None; Secure" /> .
  -Restart TM1Web/IBM Planning Analytics Spreadsheet Service

Document Location

Worldwide

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCTEW","label":"IBM Planning Analytics Local"},"ARM Category":[{"code":"a8m50000000KzJJAA0","label":"Installation and Configuration->TM1 Web"}],"ARM Case Number":"TS004447291","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Document Information

Modified date:
25 March 2021

UID

ibm16420157