article Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox in Official Support Articles

Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox

Sonja_Bauernfeind — Thu, 20 Oct 2022 12:19:51 GMT

How to enable "Integrated Windows Authentication" (IWA authentication) in Qlik Sense and QlikView. Windows Integrated Authentication allows a user’s Active Directory credentials to pass through their browser to a web server.

If you would like to do the reverse and always prompt for username and password, then the opposite settings will need to be taken.

Environment:

Internet Explorer:

Step 1, enable IWA:

Go to the Windows Control Panel and select Network and Internet
Open Internet Options
Select the Network Zone you want to configure (Trusted sites or Local intranet)
Open custom level...
Scroll to the bottom and click Automatic Logon with current username and password

If you are looking to configure your Trusted sites and add your Qlik server:

Click Trusted Sites
Click Sites
Add your desired domain name.

Google Chrome:

Google Chrome in Windows will use Internet Explorer settings

Firefox:

Navigate to the URL about:config in Firefox.
Proceed by clicking Accept the Risk and Continue
In the search bar, search for: network.automatic-ntlm-auth.trusted-uris

Add your domain.

Re: Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox

MeehyeOh — Thu, 26 Oct 2023 04:03:45 GMT

Hi, @ Albert_Candela Io, @Sonja_Bauernfeind

please check this

https://community.qlik.com/t5/New-to-Qlik-Sense/Active-Directory-user-cannot-login-Qliksense-Enterprise/td-p/2131975

Thanks!!

Re: Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox

Just6 — Thu, 07 Mar 2024 14:37:35 GMT

Hi,

I followed the steps from above. Unfortunately, Qlik Sense does not log in automatically in my Edge browser, what could be the reason? Do I need to take any other steps?

Thanks and Regards!

Re: Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox

Sonja_Bauernfeind — Mon, 11 Mar 2024 10:21:26 GMT

Hello @Just6

This would need to be specifically reviewed for Edge by your internal IT.

Maybe one of these will help:

Windows Integrated Authentication (WIA) (learn.microsoft.com)
Integrated Windows authentication in Microsoft Edge (stackoverflow)

I've tested the above in a local install of Microsoft Edge and authentication was correctly passed through. You may need to verify that your Trusted Sites are set up to allow Integrated Authentication, which your IT can assist you with.

All the best,
Sonja

Re: Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox

Skage — Fri, 08 Nov 2024 14:05:56 GMT

@Sonja_Bauernfeind

What determines what account is picked up in Sense with WIA when there are more than one domain that are allowed.

Example: Sense is running with two directory-syncs for two separate domains. The server is running in one domain and the users are logged into the other domain in windows. A random number of users are not recognized as their window-login-domain-user and the rest works just fine. Everyone use Edge or Chrome. Afik they all have the same userid in both domains.

I know Sense has to trust the authentication that the client initiate and Sense validate via the domain controller/s upon access.
The dns-name to the server is matching the domain the machine and service account is located in.

I need to validate that this isn't a Sense-problem and articulate what IT need to look into.

TIA!

Re: Integrated Windows Authentication (IWA) with Qlik using Internet Explorer, Chrome and Firefox

Sonja_Bauernfeind — Thu, 14 Nov 2024 06:54:44 GMT

Hello @Skage

This would need to be posted in the Management and Deployment forum for the right reach. Ping me with the post once you've done it and I'll forward it to the relevant experts to see if we can get some eyes on this quickly.

All the best,
Sonja