Syncing Active Directory groups while using ADFS on QlikSense

mehdibassam — Sat, 16 Nov 2024 05:23:31 GMT

We have successfully deployed ADFS on QlikSense and using it at the moment. However we are trying to set up license allocation and access rules based on AD groups. We are having some trouble as the AD groups for the ADFS users are not being synced to QLikSense.

Do i need to do something on the ADFS side to get the AD Groups for users to carry through to QlikSense?

Re: Syncing Active Directory groups while using ADFS on QlikSense

Levi_Turner — Wed, 24 Jul 2019 20:57:43 GMT

Option (1), align the user directory and userId to match the user directory and userId which is found in AD (aka do not have DOMAIN\user and domain\user@domain.tld as users inside of Qlik Sense). For a general pointer in this direction: https://community.qlik.com/t5/New-to-Qlik-Sense/How-to-retain-user-security-rules-when-transitioning-from/m-p/1603251#M141387

For ADFS specific guidance, I am using this on my end.

UserID: SAM-Account-Name as Common Name:

Sense:

Option (2), pass the group memberships in the SAML assertion (https://community.qlik.com/t5/Qlik-Design-Blog/User-Environment-What-Session-Attributes-in-Qlik-Sense/ba-p/1476590). I am doing it like so in ADFS:

ADFS:

Sense:

Do note with the session groups, the security (or license) rule syntax is going to be different.

topic Syncing Active Directory groups while using ADFS on QlikSense in Management & Governance

Syncing Active Directory groups while using ADFS on QlikSense

Re: Syncing Active Directory groups while using ADFS on QlikSense