<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Issue Loading Qlik Mashup Resources via Okta SSO on External Domain in Integration, Extension &amp; APIs</title>
    <link>https://community.qlik.com/t5/Integration-Extension-APIs/Issue-Loading-Qlik-Mashup-Resources-via-Okta-SSO-on-External/m-p/2520157#M22256</link>
    <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-start="196" data-end="203"&gt;Hi all,&lt;/P&gt;
&lt;P data-start="205" data-end="406"&gt;We are using &lt;STRONG data-start="218" data-end="254"&gt;Qlik Sense Enterprise on Windows&lt;/STRONG&gt;, and currently have a mashup hosted on &lt;CODE data-start="294" data-end="318"&gt;devqlik.our-domain.com&lt;/CODE&gt; which is in the same environment as our Qlik Sense deployment. Users successfully authenticate via &lt;STRONG data-start="356" data-end="364"&gt;Okta&lt;/STRONG&gt; and access the mashup without any issues.&lt;/P&gt;
&lt;P data-start="408" data-end="595"&gt;Our current task is to integrate the same mashup into another portal hosted on a different domain — for example, &lt;CODE data-start="521" data-end="542"&gt;external-portal.com&lt;/CODE&gt;. We created a simple &lt;CODE data-start="564" data-end="575"&gt;test.html&lt;/CODE&gt; file that includes:&lt;/P&gt;
&lt;P&gt;&lt;LI-WRAPPER&gt;&lt;/LI-WRAPPER&gt;&lt;/P&gt;
&lt;PRE class="overflow-visible!" data-start="597" data-end="715"&gt;&lt;CODE class="whitespace-pre! language-html"&gt;&lt;SPAN&gt;&lt;SPAN class="hljs-tag"&gt;&amp;lt;&lt;SPAN class="hljs-name"&gt;script&lt;/SPAN&gt;&lt;/SPAN&gt; &lt;SPAN class="hljs-attr"&gt;src&lt;/SPAN&gt;=&lt;SPAN class="hljs-string"&gt;"https://devqlik.our-domain.com/okta/resources/assets/external/requirejs/require.js"&lt;/SPAN&gt;&amp;gt;&lt;SPAN class="hljs-tag"&gt;&amp;lt;/&lt;SPAN class="hljs-name"&gt;script&lt;/SPAN&gt;&lt;/SPAN&gt;&amp;gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;
&lt;P data-start="717" data-end="773"&gt;(other resources like&lt;/P&gt;
&lt;DIV&gt;
&lt;PRE&gt;&lt;SPAN&gt;qlik-styles.css&lt;/SPAN&gt;&lt;/PRE&gt;
&lt;/DIV&gt;
&lt;P data-start="717" data-end="773"&gt;behind Okta are also referenced.)&lt;/P&gt;
&lt;P data-start="775" data-end="1058"&gt;While we are logged into Okta in a separate browser tab, accessing &lt;CODE data-start="842" data-end="873"&gt;external-portal.com/test.html&lt;/CODE&gt; fails to load &lt;CODE data-start="888" data-end="900"&gt;require.js&lt;/CODE&gt; from &lt;CODE data-start="906" data-end="930"&gt;devqlik.our-domain.com&lt;/CODE&gt;. The browser DevTools show a &lt;STRONG data-start="960" data-end="973"&gt;302 Found&lt;/STRONG&gt; redirect to an Okta SSO endpoint (e.g., Location:&amp;nbsp;&lt;CODE data-start="1014" data-end="1056"&gt;...okta.com/.../sso/saml?SAMLRequest=...&lt;/CODE&gt;).&lt;/P&gt;
&lt;P data-start="1060" data-end="1207"&gt;This suggests the request is being redirected for authentication, despite the existing Okta session and valid cookies being present in the browser.&lt;/P&gt;
&lt;P data-start="1209" data-end="1489"&gt;&lt;STRONG data-start="1209" data-end="1222"&gt;Question:&lt;/STRONG&gt;&lt;BR data-start="1222" data-end="1225" /&gt;Is this behavior expected? Could this be due to client-side cross-domain restrictions (e.g., third-party cookies or CORS), or is it likely a server-side configuration issue? Our back-end engineer mentioned that our host has been added to the list of allowed hosts.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P data-start="1463" data-end="1486"&gt;&lt;STRONG data-start="1463" data-end="1486"&gt;Additional context:&lt;/STRONG&gt;&lt;/P&gt;
&lt;UL data-start="1487" data-end="1793"&gt;
&lt;LI data-start="1487" data-end="1694"&gt;
&lt;P data-start="1489" data-end="1694"&gt;This is the &lt;STRONG data-start="1501" data-end="1516"&gt;first phase&lt;/STRONG&gt; of our integration. The &lt;STRONG data-start="1541" data-end="1555"&gt;final goal&lt;/STRONG&gt; is to embed and load Qlik reports &lt;STRONG data-start="1590" data-end="1643"&gt;seamlessly, without requiring Okta authentication&lt;/STRONG&gt; — potentially via &lt;STRONG data-start="1662" data-end="1693"&gt;ticket-based authentication&lt;/STRONG&gt;.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="1695" data-end="1793"&gt;
&lt;P data-start="1697" data-end="1793"&gt;The external portal (&lt;CODE data-start="1718" data-end="1739"&gt;external-portal.com&lt;/CODE&gt;) currently uses &lt;STRONG data-start="1756" data-end="1768"&gt;Keycloak&lt;/STRONG&gt; for user authentication.&lt;/P&gt;
&lt;/LI&gt;
&lt;/UL&gt;
&lt;P data-start="1795" data-end="1994"&gt;I’d appreciate any guidance on whether this issue lies on the client or server side, and any suggestions for how to move toward a seamless integration using ticket authentication or other approaches.&lt;/P&gt;
&lt;P data-start="1491" data-end="1556"&gt;Any insights or similar experiences would be greatly appreciated.&lt;/P&gt;
&lt;P data-start="1558" data-end="1565"&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Wed, 04 Jun 2025 17:23:52 GMT</pubDate>
    <dc:creator>Oleks</dc:creator>
    <dc:date>2025-06-04T17:23:52Z</dc:date>
    <item>
      <title>Issue Loading Qlik Mashup Resources via Okta SSO on External Domain</title>
      <link>https://community.qlik.com/t5/Integration-Extension-APIs/Issue-Loading-Qlik-Mashup-Resources-via-Okta-SSO-on-External/m-p/2520157#M22256</link>
      <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-start="196" data-end="203"&gt;Hi all,&lt;/P&gt;
&lt;P data-start="205" data-end="406"&gt;We are using &lt;STRONG data-start="218" data-end="254"&gt;Qlik Sense Enterprise on Windows&lt;/STRONG&gt;, and currently have a mashup hosted on &lt;CODE data-start="294" data-end="318"&gt;devqlik.our-domain.com&lt;/CODE&gt; which is in the same environment as our Qlik Sense deployment. Users successfully authenticate via &lt;STRONG data-start="356" data-end="364"&gt;Okta&lt;/STRONG&gt; and access the mashup without any issues.&lt;/P&gt;
&lt;P data-start="408" data-end="595"&gt;Our current task is to integrate the same mashup into another portal hosted on a different domain — for example, &lt;CODE data-start="521" data-end="542"&gt;external-portal.com&lt;/CODE&gt;. We created a simple &lt;CODE data-start="564" data-end="575"&gt;test.html&lt;/CODE&gt; file that includes:&lt;/P&gt;
&lt;P&gt;&lt;LI-WRAPPER&gt;&lt;/LI-WRAPPER&gt;&lt;/P&gt;
&lt;PRE class="overflow-visible!" data-start="597" data-end="715"&gt;&lt;CODE class="whitespace-pre! language-html"&gt;&lt;SPAN&gt;&lt;SPAN class="hljs-tag"&gt;&amp;lt;&lt;SPAN class="hljs-name"&gt;script&lt;/SPAN&gt;&lt;/SPAN&gt; &lt;SPAN class="hljs-attr"&gt;src&lt;/SPAN&gt;=&lt;SPAN class="hljs-string"&gt;"https://devqlik.our-domain.com/okta/resources/assets/external/requirejs/require.js"&lt;/SPAN&gt;&amp;gt;&lt;SPAN class="hljs-tag"&gt;&amp;lt;/&lt;SPAN class="hljs-name"&gt;script&lt;/SPAN&gt;&lt;/SPAN&gt;&amp;gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;
&lt;P data-start="717" data-end="773"&gt;(other resources like&lt;/P&gt;
&lt;DIV&gt;
&lt;PRE&gt;&lt;SPAN&gt;qlik-styles.css&lt;/SPAN&gt;&lt;/PRE&gt;
&lt;/DIV&gt;
&lt;P data-start="717" data-end="773"&gt;behind Okta are also referenced.)&lt;/P&gt;
&lt;P data-start="775" data-end="1058"&gt;While we are logged into Okta in a separate browser tab, accessing &lt;CODE data-start="842" data-end="873"&gt;external-portal.com/test.html&lt;/CODE&gt; fails to load &lt;CODE data-start="888" data-end="900"&gt;require.js&lt;/CODE&gt; from &lt;CODE data-start="906" data-end="930"&gt;devqlik.our-domain.com&lt;/CODE&gt;. The browser DevTools show a &lt;STRONG data-start="960" data-end="973"&gt;302 Found&lt;/STRONG&gt; redirect to an Okta SSO endpoint (e.g., Location:&amp;nbsp;&lt;CODE data-start="1014" data-end="1056"&gt;...okta.com/.../sso/saml?SAMLRequest=...&lt;/CODE&gt;).&lt;/P&gt;
&lt;P data-start="1060" data-end="1207"&gt;This suggests the request is being redirected for authentication, despite the existing Okta session and valid cookies being present in the browser.&lt;/P&gt;
&lt;P data-start="1209" data-end="1489"&gt;&lt;STRONG data-start="1209" data-end="1222"&gt;Question:&lt;/STRONG&gt;&lt;BR data-start="1222" data-end="1225" /&gt;Is this behavior expected? Could this be due to client-side cross-domain restrictions (e.g., third-party cookies or CORS), or is it likely a server-side configuration issue? Our back-end engineer mentioned that our host has been added to the list of allowed hosts.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P data-start="1463" data-end="1486"&gt;&lt;STRONG data-start="1463" data-end="1486"&gt;Additional context:&lt;/STRONG&gt;&lt;/P&gt;
&lt;UL data-start="1487" data-end="1793"&gt;
&lt;LI data-start="1487" data-end="1694"&gt;
&lt;P data-start="1489" data-end="1694"&gt;This is the &lt;STRONG data-start="1501" data-end="1516"&gt;first phase&lt;/STRONG&gt; of our integration. The &lt;STRONG data-start="1541" data-end="1555"&gt;final goal&lt;/STRONG&gt; is to embed and load Qlik reports &lt;STRONG data-start="1590" data-end="1643"&gt;seamlessly, without requiring Okta authentication&lt;/STRONG&gt; — potentially via &lt;STRONG data-start="1662" data-end="1693"&gt;ticket-based authentication&lt;/STRONG&gt;.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="1695" data-end="1793"&gt;
&lt;P data-start="1697" data-end="1793"&gt;The external portal (&lt;CODE data-start="1718" data-end="1739"&gt;external-portal.com&lt;/CODE&gt;) currently uses &lt;STRONG data-start="1756" data-end="1768"&gt;Keycloak&lt;/STRONG&gt; for user authentication.&lt;/P&gt;
&lt;/LI&gt;
&lt;/UL&gt;
&lt;P data-start="1795" data-end="1994"&gt;I’d appreciate any guidance on whether this issue lies on the client or server side, and any suggestions for how to move toward a seamless integration using ticket authentication or other approaches.&lt;/P&gt;
&lt;P data-start="1491" data-end="1556"&gt;Any insights or similar experiences would be greatly appreciated.&lt;/P&gt;
&lt;P data-start="1558" data-end="1565"&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jun 2025 17:23:52 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Integration-Extension-APIs/Issue-Loading-Qlik-Mashup-Resources-via-Okta-SSO-on-External/m-p/2520157#M22256</guid>
      <dc:creator>Oleks</dc:creator>
      <dc:date>2025-06-04T17:23:52Z</dc:date>
    </item>
  </channel>
</rss>

