article How to Enable User Groups in Qlik Sense Enterprise SaaS in Official Support Articles

How to Enable User Groups in Qlik Sense Enterprise SaaS

Andre_Sostizzo — Thu, 25 Jan 2024 14:04:40 GMT

This video demonstrates how to enable automatic user group creation when using Auth0 and Okta Identity Providers in Qlik Sense Enterprise SaaS.

This customization is provided as is. Qlik Support cannot provide continued support of the solution. For assistance, reach out to our Professional Services or engage in our active Integrations forum.

Please note: in order to make sure that Windows AD groups are sent from Okta to Qlik Cloud, make sure to:

modify the filter in the "Groups claim expression" to add the AD groups
allow groups to be read in OKTA API scopes

Please, refer to Okta support for instructions on how to do that.

Re: How to Enable User Groups in Qlik Sense Enterprise SaaS

jfitz_chicago — Mon, 22 Jan 2024 15:21:14 GMT

Very helpful. I'm using Auth0. I used Roles to store group info.

groups box = /https:~1~1qlik.com~1groups

Advanced options claims = email openid profile https://qlik.com/groups

I created an API with the permissions to read groups. (Not 100% sure I needed to do that)

And I created a Flow in the Post Login section (Actions > Flows > Login) that added groups to the response.

/**

* @param {Event} event - Details about the user and the context in which they are logging in.

* @param {PostLoginAPI} api - Interface whose methods can be used to change the behavior of the login.

exports.onExecutePostLogin = async (event, api) => {

const namespace = 'https://qlik.com';

if (event.authorization) {

api.idToken.setCustomClaim(`${namespace}/groups`, event.authorization.roles);

api.accessToken.setCustomClaim(`${namespace}/groups`, event.authorization.roles);

}