Shibboleth And QV Server EE

[simospa]

Hi,

I need to know if Shibboleth can be used as SSO and Third Part Security System with QlikView Server Enterprise Edition.

Anyone has experience about it?

Thanks a lot

S.

[ergustafsson · Accepted solution]

Hi Simone,

Yes, this can be done. Shibboleth is an open source project that is a bit more complex and more extensible but otherwise works in the same way as SiteMinder. You configure it as a filter in front of the web application and then the user coming in to the web application has to authenticate with Shibboleth first, then Shibboleth passes his credentials to the web application in the form both a SAML statement and other attributes in HTTP Headers. So using it can be as simple as choosing to use the HTTP Header for authentication in the QEMC and then getting your customer to configure the Shibboleth filter in front.

In essence, Shibboleth can handle the SAML requests and can then set the user identity in the HTTP header, which in turn is configurable in QlikView.

There are a few different ways of using it, so it depends on how it is implemented. It does not appear to integrate very well with IIS though, sometimes it is even easier to use Apache as a reverse proxy in front of it.

Let me know if this helps.

Regards,

Erik

[simospa]

Thanks a lot!

S.

[pentaxadmin]

Hi Eric:

Would you have some documentation on Shibboleth SAML SSO integration with Qlik Sense?

Thanks for any information that you can provide.

Branislav

[ergustafsson]

Unfortunately not, this was with QlikView. They way of authentication is not identical, but very similar in many aspects. I suggest you explore the SSO options with Qlik Sense on the help site.

Cheers.