topic Re: Qlik Cloud - Configuring Okta as a SAML identity provider in Integration, Extension & APIs

Qlik Cloud - Configuring Okta as a SAML identity provider

agigliotti — Tue, 18 Nov 2025 09:34:52 GMT

Hello,
After successfully recovered the tenant access using the URL: https://tenant-url/login/recover , I'm struggling to add a new Okta SAML IdP on Qlik Cloud.
I just followed the guide at https://help.qlik.com/en-US/cloud-services/Subsystems/Hub/Content/Sense_Hub/Admin/configuring-idp-okta.htm

but at the end after Okta authentication to validate the IdP, I get landed in the Okta Admin Console web page rather than be presented with the options to promote the user to a Qlik Cloud tenant admin and to activate the IdP.

Currently the new IdP created is still in "Validation pending" state and I'm not able to validate it and get it activated and the actual Qlik Cloud authentication is with the default Qlik account.

Trying to click on the Okta app for accessing Qlik cloud i get the message below:

{"errors":[{"title":"Invalid authentication callback","detail":"Active IDP is not a SAML IDP","code":"AUTH-2","status":"400"}],"traceId":"63aa8f7d280d3d7d4c02ac20b163086d"}

Could anyone help me to fix it? @Albert_Candelario @Levi_Turner @Daniele_Purrone @Damien_V @Maria_Halley @Bastien_Laugiero @Sebastian_Linser @ToniKautto

Many thanks in advance for your time.

Best Regards

Re: Qlik Cloud - Configuring Okta as a SAML identity provider

Daniele_Purrone — Tue, 18 Nov 2025 14:56:52 GMT

Ciao @agigliotti ,

the error message is suspicious. Have you checked with Okta's support as well?

Re: Qlik Cloud - Configuring Okta as a SAML identity provider

agigliotti — Tue, 18 Nov 2025 15:30:10 GMT

Ciao @Daniele_Purrone ,

Since using Okta with QSEoW is working fine, I think there is something wrong in Qlik SaaS.
Okta support said the user is logged successfully on their side.

Could the recover login be the cause of such strange behavior?

I remember that before using it Okta worked fine.

How can I troubleshooting it?

Re: Qlik Cloud - Configuring Okta as a SAML identity provider

agigliotti — Wed, 19 Nov 2025 20:37:14 GMT

Just to inform that I moved to Okta by OIDC and it worked well in both on premise and cloud deployments.

Best Regards

Re: Qlik Cloud - Configuring Okta as a SAML identity provider

Daniele_Purrone — Thu, 20 Nov 2025 14:39:29 GMT

Glad it's solved!