topic Re: SAML certificate in Integration, Extension & APIs

What certificate is needed for enabling SAML authentication?

Martin22 — Tue, 26 Oct 2021 18:00:34 GMT

Hi,

I'm currently trying to implement SAML authentication on our Qlik Sense dev platform.

So I followed the steps described in the Knowledge Base, but I encountered difficulties on the SAML signing algorithm : I need to implement the SHA-256, which requires a certificate, but I can't find what certificate is needed, or where to upload it.

Can somebody help me on this ?

Best regards,

Martin.

Re: SAML certificate

Maria_Halley — Thu, 16 Sep 2021 10:01:12 GMT

@Martin22

I will move this to the integration board instead.

Re: SAML certificate

Damien_V — Thu, 16 Sep 2021 10:08:31 GMT

Hello @Martin22

The SP certificate used for SAML is the same as the one applied on the Qlik Proxy service

https://community.qlik.com/t5/Knowledge/How-to-change-the-certificate-used-by-the-Qlik-Sense-Proxy-to-a/ta-p/1712773

When it comes to SHA-256 with SAML, this certificate's private key cryptographic provider needs to be specifically "Microsoft Enhanced RSA and AES Cryptographic Provider"

https://community.qlik.com/t5/Knowledge/SHA-256-and-Converting-the-Cryptographic-Service-Provider-Type/ta-p/1716032

Hope that helps.

Re: SAML certificate

Martin22 — Thu, 23 Sep 2021 14:13:57 GMT

Hi,

Thank you for your answer, we're working on it.

Once we have the certificate, is there a specific folder where we have to paste it, so the virtual proxy automatically uses it ?

Best regards,

Martin.

Re: SAML certificate

Damien_V — Thu, 30 Sep 2021 14:24:26 GMT

Hello @Martin22

You just need to import it in the Windows mmc console as described in the link, then indicate the thumbprint in the QMC. There's a video with the steps in the article I previously sent you.

Best regards,