topic Re: Modifying Password Policy in QlikSense Enterprise (on premise) in Management & Governance

Modifying Password Policy in QlikSense Enterprise (on premise)

arizaputra — Thu, 18 Apr 2024 06:15:38 GMT

Hi everyone,

I've tried searching for hours to answer a client's request

Is it possible to modify password policy in QlikSense Enterprise (on premise)?

Modifying minimum length, special character, number, expiration duration, etc

The client has it's own password policy, so that they need to make sure could comply with it

Please keep in mind that Qlik Sense cloud is not an option

Integration with user directory such as ActiveDirectory is not available. So it is only native Qlik user account

I'm not yet found a clear statement in the community regarding the possibility

Thank you in advance

Regards,

Ariza

Re: Modifying Password Policy in QlikSense Enterprise (on premise)

p_verkooijen — Thu, 18 Apr 2024 07:02:50 GMT

Hi @arizaputra ,

Qlik Sense only manages authorization not authentication.

As you state you do not have a link with an AD.
Then you are creating users and passwords yourself, so just a password (generator) set to the correct complexity requirement.

Otherwise you could change the local Windows account policies, edit the local computer policy see explanation how https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements

Re: Modifying Password Policy in QlikSense Enterprise (on premise)

arizaputra — Thu, 18 Apr 2024 07:30:59 GMT

Thank you for your quick response @p_verkooijen

So we could use local account in Windows server for logging in to Qlik Sense?

So the password policy is handled by Windows, not Qlik Sense

Re: Modifying Password Policy in QlikSense Enterprise (on premise)

p_verkooijen — Thu, 18 Apr 2024 09:50:02 GMT

@arizaputra yes you could use local accounts to login.

If the client has GWorkspace or Office365/AzureAD I would highly advise to link the Virtual proxy to use this idp. Also for any 2FA / MFA requirements that could be in place.

Also you don't have any hassle with creating / maintaining / deleting users and passwords