topic Re: Setup SQL (ODBC) User Directory Connector in Integration, Extension & APIs

Setup SQL (ODBC) User Directory Connector

imtiaz_ullah — Fri, 20 Feb 2015 14:58:13 GMT

Hi all,

I am trying to see if QS allows authentication from an "internal" sql database using my own security model.

I came across a poor piece of documentation on how to try this but it's not very clear.

I have successfully setup the connector however and it has pulled my users into the User section in QS.

What I cannot understand though is how I can now use the account to login to QS from the front end?

In addition there is nothing around the password authentication part - like do I even need to store this in the database?

This part of the system is not clear at all and whilst using LDAP/AD is very well documented, the SQL approach is very poor.

Or perhaps I am misunderstanding this particular functionality, and it's not even designed for this?

Immy

Re: Setup SQL (ODBC) User Directory Connector

Thu, 24 Sep 2015 23:04:16 GMT

Hi all,

I'm in the same conditions, does anyone found a solution?

Davide

Re: Setup SQL (ODBC) User Directory Connector

brucearmstrong — Fri, 25 Sep 2015 15:19:55 GMT

I used external authentication for this. Basically I just used QlikAuthNet from Branch. The user hits the url for the virtual proxy that forwards them to the external authentication (your page). After you do whatever magic you need to do to authenticate the user, you create a ticket something like:

var req = new Ticket()
{
  UserDirectory = "DATABASE",
  UserId = "whatevertheuseridis"
};
req.TicketRequest();

That routes them back to the Qlik server which then automatically logs them into that account.

UserDirectory would be whatever name you gave your database user directory. I called mine, strangely enough, "DATABASE".

Re: Setup SQL (ODBC) User Directory Connector

konrad_mattheis — Sat, 26 Sep 2015 05:53:35 GMT

Hi,

this is working quite fine. For c# / .net here is also a sample to make a ticket authentication:

http://help.qlik.com/sense/2.1/en-us/developer/#../Subsystems/ProxyServiceAPI/Content/ProxyServiceAPI/ProxyServiceAPI-Example-Connect-API-Certificates.htm?Highlight=ticket

bye

Konrad

Re: Setup SQL (ODBC) User Directory Connector

daniel_peger — Fri, 18 Dec 2015 11:24:53 GMT

Perhaps a little bit late but:

The ODBC user directories in general have basically nothing to do with authentication. The user directories are just used to look up user attributes, that can be used to limit access to applications etc (stream access rules).

To perform a database based authentication you'll need to set up a custom authentication module as described here: Authentication API

Basically Qlik redirects to the URL that is specified in the virtual proxy config. At this URL you can perform the user authentication (i.e. offer a login screen and validate that the user against your database). Once you validated the user credentials, you request a QlikTicket using Qlik's Add ticket‌ call as already described above. With this ticket in place you again redirect to the originally requested URL (part of the ticket response). And you're done.

Perhaps the qlik-authentication project on Qlik Branch might be a good point to start, if you're not familiar with this.

Re: Setup SQL (ODBC) User Directory Connector

reddy-s — Sat, 19 Dec 2015 20:45:34 GMT

Hi Imtiaz,

This link might be handy as well.

https://help.qlik.com/sense/2.1/en-US/online/#../Subsystems/ManagementConsole/Content/user-directory-connectors-ODBC-pro…