topic Re: Section Access : NT Implementation in QlikView

Section Access : NT Implementation

sanketkhunte — Mon, 26 Jan 2026 18:19:17 GMT

Hi Team,

I have one question regarding NT Section Access Functionality in Qlikview. We used this functionality when set of users are seating under one DOMAIN. Let say we have DOMAIN_Test under which all users are seating and accessing the qlikview dashboard.

That's fine and its working fine. But how can any valid user (having access of this dashboard ) can access same dashboard from out of domain.

Let say I am Sanket : in Office i am seating under DOMAIN_Test under which i can access my dashboard but when i am trying to access same dashboard from my home or any other device it's not accessible.

Any solution on this. How Can i access this dashboard from out of domain ??

As Qlikview dashboard can accessible through any device like iPhone,iPad etc.

Your suggestion really appreciate to me.

Thank you.

Sanket

Re: Section Access : NT Implementation

Thu, 30 Jan 2014 08:58:34 GMT

Hi,

To access QV out of domain we need to have Public IP. Confirm with network team whether it is public IP.

HTH

-Shruti

Re: Section Access : NT Implementation

Andrea_Ghirardello — Thu, 30 Jan 2014 08:59:10 GMT

Do you need to use NTNAME, NTSID or NTDOMAINSID?

Anyway, you can combine security rules and you can specify for example NTNAME for specific users and particular USERID and PASSWORD for others so that people may open the document in different ways.

Re: Section Access : NT Implementation

sanketkhunte — Thu, 30 Jan 2014 09:17:33 GMT

Thank you for your input. Let me check with Network team.

Re: Section Access : NT Implementation

sanketkhunte — Thu, 30 Jan 2014 09:19:41 GMT

Thank you for your input. After using NTNAME,NTSID and Serial Number etc. in section access ; does that dashboard will accessible to users from OUT OF DOMAIN.

If you How ?? Please your clarification will help to me.

Re: Section Access : NT Implementation

Thu, 30 Jan 2014 09:34:46 GMT

As of my understand....Your domain is restrictable domain. Consult your internal IT team and ask him to give rights to login your userid in out of domain also... he will helps you

Re: Re: Section Access : NT Implementation

Andrea_Ghirardello — Thu, 30 Jan 2014 09:35:44 GMT

Say for instance that you have the following table (e.g. into an excel workbook):

ACCESS	USERID	PASSWORD	NTNAME
ADMIN	ADMIN	ADMIN	DOMAIN\ADMIN
ADMIN	USER1	USER1	DOMAIN\USER1
ADMIN	USER2	USER2	DOMAIN\USER2

If you use the following script you should be able to allow people to access automatically by using the NTNAME if logged with the correspondent domain user or by using one of the USERIDs above.

Section Access;


Auth:
LOAD 
  ACCESS, 
  '*' as USERID, 
  '*' as PASSWORD,
  NTNAME
FROM
[.\QlikView Script Section Access.xlsx]
(ooxml, embedded labels, table is Sheet1) where (not IsNull(ACCESS));


Concatenate (Auth)


LOAD 
  ACCESS, 
  NTNAME as USERID, 
  PASSWORD, 
  '*' as NTNAME
FROM
[.\QlikView Script Section Access.xlsx]
(ooxml, embedded labels, table is Sheet1);


Section Application;

etc...

Hope this helps.

Re: Section Access : NT Implementation

sanketkhunte — Thu, 30 Jan 2014 09:49:14 GMT

Really Good Reply. Its helpful. Let me try this one and if any issue found will get in touch with you.

Thank you.

Re: Section Access : NT Implementation

Peter_Cammaert — Thu, 30 Jan 2014 09:49:43 GMT

No, because QVS needs to figure out whether your out-of-domain visitor has a CAL, and Section Access has nothing whatsoever to do with Licenses. Section Access is just for document/data security.

There is a simple trick to allow everybody to login to the QlikView web server, either automatically inside the domain by way of SSO, or with an explicit login dialog box if your visiting from outside the domain. The trick is to use IIS as a web server, and put IIS in IWA-mode (Integrated Windows Authentication). Whenever someone visits IIS without previously being logged in into the domain, IIS will present the visitor with a domain login dialog. Problem solved.

You could put QVWS in login mode as well, but I think everybody will be presented with a login dialog and that may not be what you want.

Of course, it is still true that your Server IP must be a public IP.

Peter

Re: Section Access : NT Implementation

sanketkhunte — Tue, 04 Feb 2014 11:00:33 GMT

Thank you for your Reply.

This is all regarding dashboard level access settings but we are not in a position to access the Qlikview Access Point.

What are the setting required to do at QEMC level by which we can provide access to all users who are seating out of domain.

Thank you.

Sanket

Re: Section Access : NT Implementation

sanketkhunte — Tue, 04 Feb 2014 11:03:25 GMT

Thank you Shruti for your input.

You mean for getting access to all users who are seating out of particular domain we required to make public IP configuration.

Have you done this setting. If yes kindly let me know how and @ QEMC level do we require to make any changes for that ?

Thank you.

Sanket

Re: Section Access : NT Implementation

Peter_Cammaert — Tue, 04 Feb 2014 11:06:39 GMT

See my response a few levels below.

I guess you could install a separate QVWS and configure it to always show a login prompt. Out-of-domain users visit the second web server and first need to authenticate, while Inside-domain users visit the first web server that uses SSO to automatically recognize users that were authenticated by Windows AD.

Installing a second web server/AccessPoint isn't that difficult.

Peter