SSO Config Issue with Apliqo UX Next Gen

Hello,

I have SSO working for PAW (i.e. punch in PAW URL and it will directly go to the home screen). We just installed Apliqo UX 2026.04, connected to the TM1 Servers (security mode 5) with CAM authentication. PAW and Apliqo are installed on the same linux machine. TM1 and Cognos are one a different Windows server.

In the Cognos Configuration, we have “Enable CAF validation?” set to false, so no valid domains or hosts are set. I have update the pmhub and planning files with the Apliqo UX URL and port. I have updated the variables_TM1 file with the Apliqo UX URL and port.

When I go to the Apliqo URL, it wlil show the login screen and the namespace will be blank. I will be forced to select the namespace. I can log in using CAM ID fine. If I click the SSO button, I receive the error message below.

Variables_TM1

When the instance is connected, the CAM passport will have the gateway URL populated, but the CAM Namespace will not be populated. When I type in the namespace name and save, and then reopen the edit instance, the CAM namespace will be blank again. Not sure if this is an issue.

We did add SSL via NGINX so the url users would access would be https://servername:8443. This does a simple proxt redirect, but everything after would be handled using the HTTP url.

Any thoughts on where I missed something?

Thanks!

I think I may have missed updating the .env with “Apliqo_Hostname”. Colleague just pointed that out.

As most of the time, (well really all the time except for local demos) the UX SPA will be sitting behind a ALB, UX doesn’t actually know what the domain is that the user is interacting with unless it is explicitly told, but without this information SSO won’t work as we can’t tell the auth provider where to redirect to. That’s what this setting is for.

This doesn’t (and shouldn’t) need to be entered in the .env file anymore. This setting has been moved to the GUI and is stored in the content store. If your .env file has tagged along through upgrades this line can be removed.