topic Re: How to suppress the login input-box when using section access on Accesspoint? in QlikView

How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 02:20:23 GMT

Hi All,

I have a question about the section access. I just want to suppress the login-box when I open a dashboard that's using section access on AccessPoint.

The background is :

I installed the WebServer on IIS.

And we are using the SSO for users(getwebticket), so user can click a button to jump to the AccessPoint, so we only know the user's username.

In section access, i only judge the USERID, like

ACCESS USERID REGION

ADMIN AIOLOS

USER TEST USA

USER TEST1 CHINA

When user = TEST click the dashboard on AccessPoint, it will jump to a login-box

I need to input the username and the password(I create in QMC, not the real password of user, because I don't know the real password), then I can get into the dashboard, but I only judge the USERID in section access, so I don't want user to input userid and password here, I just want to get into the dashboard directly when I click it.

So what should I do for it?

Thanks.

Aiolos Zhao

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 02:50:33 GMT

Any idea or method to solve that?

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 03:37:03 GMT

Anyone have ideas? Because I really want to solve that problem...

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 05:09:28 GMT

Any help?

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 07:03:31 GMT

I have looked through many threads, seems like there is no answer about this problem....

Re: How to suppress the login input-box when using section access on Accesspoint?

Anonymous — Tue, 14 Jun 2016 07:13:13 GMT

Hi Aiolos,

You may use NT authentication instead of USERID and PASSWORD fields on Section Access.

If you have UserID and Password fields, QlikView will ask you to a user by input box.

Regards!

Re: How to suppress the login input-box when using section access on Accesspoint?

Peter_Cammaert — Tue, 14 Jun 2016 07:18:21 GMT

If you want to use section access with USERID but at the same time you do not want to use USERID, then why use section access at all? The USERID/PASSWORD security has one guaranteed feature: it doesn't connect to anything outside of the document and thus provides real embedded security. Whether the document runs off and ends up at the other side of the globe or not.

Alternatives to your deadlock:

use NTNAME and real SSO as supplied by Windows and (optionally) AD, or by any other DSC controlled directory

use file security to grant access to a document by setting Read permissions in Windows Explorer.

Of course, this kind of security (and security in general) depend on whether you can identify a user at all times and for all components of the QlikView environment.

Peter

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 07:50:44 GMT

Hi Manuel,

Thanks for reply, because we don't want to know users' password, and user login the accesspoint using their email, but not NTNAME, so I try to user USERID(only USERID, no PASSWORD), because I think the USERID means the login username when they get into the accesspoint.just like :

Is there any way to use this account name to control the section access? so that it won't need to input username and password when I get into the dashboard.

Thanks.

Aiolos

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 08:02:05 GMT

Hi Peter,

Thanks for reply. Because I think the USERID means the username when we login the accesspoint :

User login the accesspoint using their email(SSO from my company portal), and we only get their email in database, not NTNAME, so I decide to use USERID to do the section access. Because I think if the USERID = the username, it's done. So do you know how to use this username to do the section access?

And if I change to use NTNAME method, I just need to change the section access to NTNAME, right?

Thanks.

Aiolos Zhao

Re: How to suppress the login input-box when using section access on Accesspoint?

uacg0009 — Tue, 14 Jun 2016 10:00:44 GMT

And I also want to know that if I use the same username and password to login the accesspoint in different computer(different user name), it will show different data, right? (if I set different data in section access for these 2 computer user name)

Thanks.

Aiolos Zhao

Re: How to suppress the login input-box when using section access on Accesspoint?

Anonymous — Tue, 14 Jun 2016 10:12:53 GMT

Hi Aiolos,

At the time you use the USERID field will ask user name and password. You can combine the two, because the first field that is checked is the NTNAME, and if the server can not find the user in the field NTNAME the USERID field will be checked, if specified. The NTNAME field is the domain user.

Regards!

Re: How to suppress the login input-box when using section access on Accesspoint?

Peter_Cammaert — Wed, 15 Jun 2016 18:45:11 GMT

I agree that there are many types of user names, user IDs, AD user accounts, custom users, self-defined self-handled identies and the likes in the QlikView world, and they (may) make the matter of authentication extremely confusing. The only thing I can say is that the USERID/PASSWORD in Section Access is document-internal only. It has nothing to do with any external authentication service supplied by the QlikView serveices, Windows, A1ctive Directory or any other directory service. This authentication system does not exist outside your QlikVeiw document. As a result, you will always face the login dialog.

You could load the USERID field in section access with the email addresses from the same database as the one you are using for the custom login form, but still the outside environment has no standard way (like SSO) to pass any accepted credentials to the document in a transparant way.. AFAIK there is only one mechanism that features a real out-of-the-box SSO, and that mechanism involves the NTNAME field.

Note that NTNAME is not only used to match AD credentials. It can be used for Customer users (defined in a Custom Directory DSC) as well..I guess that could save your day if you could define a DSC that authenticates users using their email address. But you didn't provide any details about how the Custom login page verifies email addresses.

Best,

Peter

Re: How to suppress the login input-box when using section access on Accesspoint?

Peter_Cammaert — Wed, 15 Jun 2016 18:58:26 GMT

Section Access data reduciton is linked to user IDs, not to machines. If you login using a different user ID, you'll get different data. If you login using the same User ID, you'll get the exact same data reduction, whatever the machine you are using toe get to the AccessPoint.

Note that you cannot use a user that only exists in a local (machine) directory to aiuthenticate in a centralized service like QlikView Server, because the latter doesn't know about that local directory. In addition to that, that's exactly why Actiuve Directory was invented: AD spans machines and networks and manages access to resources dispersed over an entire network in a uniform way.

Peter.