Windows Authentication

[rittermd]

I know that by default Qlik Sense uses Windows to authenticate users.

Here is my scenario.

My company is a result of an acquisition.  Half of the company is using Active Directory.  The other half is not.  There are currently no plans to purchase AD licenses and add the users that are not there now.  So any given user trying to access the hub could be in one or the other(AD or local).

Currently I am loading attributes using an excel UDC and manually adding users as local users on the QS server.  This will not work going forward as we add more users.

My question is this.  Will QS authenticate from both the AD and the local users?  So a user tries to login.  Will QS check the AD and if they are not there then check the local users?  Or reverse?

If the answer is yes is there anything that I need to do to make that happen or is it automatic?

If the answer is no do you have any ideas on how I can make this scenario work?

Running QS 3.0

Thanks

[Aurelien_Martinez]

Hi,

You can creat one UDC for AD and an other for local.

Aurélien

[shraddha_g · Accepted solution]

You can create local network user connection for the users created on QS server.

Also for AD User create LDAP or Active Directory connection for AD User.

According to the domain name used, authentication will be done..

For local users,  username will be servername\username and for AD users it will be domainname\username.

I hope it is helpful

[rittermd]

I am not asking about the UDC to load attributes.  I know that I can have multiple UDCs.  So I could continue to load the non AD users from excel and the AD users from a new UDC.

I need to understand how QS authenticates the user to Windows(local user or AD) after they are loaded into QS with a UDC?

[shraddha_g]

It identifies source of the users by domainname/servername used and then authenticates.

[rittermd]

So if I understand what you are saying.  The authentication back to Windows is controlled by the value loaded for the user in QS in the user directory column.

So the users that I load from excel (which are local users) contains the server name only.  When I load AD user this column will contain the Domain name?

If that is correct this is starting to make sense.

[shraddha_g]

Yes it is correct

[rittermd]

Do I need to create another virtual proxy for AD or can they all use the standard one?

[shraddha_g]

You will just have to create a user directory connection for active directory