topic Re: Using and IDp in Data Movement & Streaming

Using and IDp

pasgalbarra — Wed, 22 Apr 2026 16:24:56 GMT

Hi Community,

We want to invite external users to our tenant and as we have an IDp already we can't send email invitations, the problem is that I don't know how to use the IDp that we have:

I am attaching an image of the IDp, Can someone help me how to use it?

Thanks

Re: Using and IDp

Eduardo_Monteiro — Wed, 22 Apr 2026 17:16:27 GMT

Hello @pasgalbarra

If the ldp is already set up, the users should be able to log in. You can share the tenant URL.

Regards,

Re: Using and IDp

chriscammers — Wed, 22 Apr 2026 17:29:20 GMT

What you have done is a good start but now you have to create a web app that will authenticate your external users who will then be passed from your web app to your Qlik tenant. The JWT configuration you showed is a token based authentcation method that allows your web app to tell qlik who a user is and by trust relationship Qlik will believeve it and if that user has permission to do stuff they will be allowed to do those things.

It seems to me you may be more interested in federated authentication through your microsoft identity provider which will be more secure and less custom coded.

Re: Using and IDp

pasgalbarra — Thu, 23 Apr 2026 09:02:20 GMT

Hi @chriscammers ,

Thanks for the time to respond my query.

We have a Microsoft identity provider that we use for user inside the company, but now we want to invite some external users, to be honest I am very lost here, but with your comment do you mean to create another Microsoft identity provider? And the domain is the external user?

If you can elaborate on your solution (federated authentication through your microsoft identity provider) I will really appreciate.

Thanks

Re: Using and IDp

pasgalbarra — Thu, 23 Apr 2026 09:03:35 GMT

Hi @Eduardo_Monteiro ,

I want specific user to have access to the tenant, what do you mean by share the tenant URL and they should be able to login?

Thanks

Re: Using and IDp

Eduardo_Monteiro — Thu, 23 Apr 2026 10:27:19 GMT

Hi @pasgalbarra

Like @chriscammers mentioned, you might be looking for federated authentication.

Please check the following links:

Identity providers in Qlik Cloud | Qlik Cloud Help

Configuring an interactive OIDC IdP | Qlik Cloud Help

Keep in mind that you can only have one active IdP at a time.

BR,

Re: Using and IDp

hugo_andrade — Thu, 23 Apr 2026 13:56:08 GMT

@pasgalbarra ,

JWT is meant for programmatic access. You would have to check what is the process within your portal to create one user.

Also, please confirm you are Tenant Admin, in order to invite users. Since your JWT IdP is not interactive, it should not prevent you from inviting users from the console, as long as you have the right roles.

Re: Using and IDp

pasgalbarra — Thu, 23 Apr 2026 14:50:14 GMT

Hi @hugo_andrade ,

I am tenant admin, but I cant send invitation from console (see image)

thanks for your help

Re: Using and IDp

hugo_andrade — Thu, 23 Apr 2026 18:52:04 GMT

@pasgalbarra

What happens when you access the portal with a new account?

On our implementations, we handle the User creation workflow within the portal itself. It is worth checking.

Re: Using and IDp

vighnesh_gawad — Fri, 24 Apr 2026 14:40:03 GMT

Are external users part of IDP that you have setup for qlik sense? If not then you cant use this IDP for external users. Also in Qlikcloud, you cant use multiple Idp at same time.

As other suggested what you are probably looking for is probably Identity federation. Check out below support article.

https://community.qlik.com/t5/Official-Support-Articles/Using-Multiple-concurrent-Identity-Providers-with-Qlik-Cloud/ta-p/2518278

Re: Using and IDp

pasgalbarra — Tue, 28 Apr 2026 08:43:28 GMT

Thanks.

Looks like this is what we need.

Re: Using and IDp

pasgalbarra — Tue, 14 Jul 2026 08:16:33 GMT

Hi @vighnesh_gawad ,

I hope you are having a great time and supporting Argentina tomorrow 🙂

I created this post to understand the possibilities of adding external users, and identity federation sounds like the best option. However, I don't know if you have more details about how to do it. The link you shared is interesting, but it's Keycloak-oriented and I don't quite understand it

I have another post:

https://community.qlik.com/t5/Integration-Extension-APIs/Adding-External-users-to-QLik-Tenant/m-p/2552812#M22972

Not sure if you can help me there.

Thanks in advance

Re: Using and IDp

vighnesh_gawad — Tue, 14 Jul 2026 11:21:05 GMT

Hi @pasgalbarra ,

I don't really follow football 😄 though I watch F1 occasionally.

Regarding your question, if you're comfortable sharing a few more technical details in another post, it would help narrow things down. For eg, which SSO/Identity Provider are you trying to integrate (Microsoft Entra ID, Okta, Keycloak, Auth0)?

If you don't want to post those details publicly, feel free to send me a private message.

Also, have you already tried implementing the integration?
what approach did you take, and what issue are you running into?
That would make it easier to understand the scenario and suggest right approach.

Re: Using and IDp

pasgalbarra — Wed, 15 Jul 2026 14:55:01 GMT

Hi @vighnesh_gawad ,

Thanks for your time.

I am F1 fan as well, maybe I am wasting to much time with sports hehe

I am trying to understand the process (the plan is to do it with Microsoft Entra ID) to estimate the effort, but I am a bit lost on what would be done by Qlik side and what should I ask to Azure team

Thanks again

Re: Using and IDp

vighnesh_gawad — Thu, 16 Jul 2026 13:31:07 GMT

Sure @pasgalbarra . If you look at the diagram in the support article I shared, there are two main steps:

Connect Qlik Cloud to the primary Idp (Keycloak in the example).
Set up identity federation between the primary and secondary Idp (Keycloak and Auth0 in the example).

In your case, it would be the same. You need to connect Qlik Cloud to your Microsoft Entra ID as primary IdP, which you may have already done.

second step is setting up identity federation between your secondary IdP and Microsoft Entra ID. This is usually handled by the team that manages Microsoft Entra ID rather than the Qlik developer.

From the Qlik side, you can help with groups and user access for external users based on the article.