SSO WebTicket Trusted IP Issue

Anonymous — Wed, 25 Nov 2020 16:16:04 GMT

Hi All,

We have configured SSO using Web Tickets and Trusted IP and its working fine with third party portal.

Now, we have configured SSL and want to remove the Trusted IP configuration from the config.xml file.

We are using Custom Users, and I have gone through below link -

Where it says, if we don't want to with Trusted IP, we can have -

Option 1 – use windows permissions

The code or process asking for a ticket needs to run as or provide a windows user identity. The user ID must be a member of the QlikView Administrators windows group on the QlikView server.
As the GetWebTicket page runs under the QVAJAXZFC directory on the web server and one of the above steps made the directory work with Anonymous users – for this page only – enable windows authentication in IIS
Now the Login page must authenticate itself when requesting a ticket as a windows user and that user must be a QlikView Administrator. In the attached example the login is hardcoded, however this could be configured in other ways

My query is -

1> How can we add CUSTOM users in QlikView Administrators windows group

2> Can we just enable any port which will be accessible to all users to fetch the WebTicket instead of "Invalid Call"

How we can achieve SSO with Custom Users without using Trusted IP.

Please assist.

Thanks & Regards,

Re: SSO WebTicket Trusted IP Issue

Anonymous — Fri, 11 Nov 2016 09:49:01 GMT

any updates