For my Qlik applications and other webservices I'm using one central KeyCloak instance as Identity Provider (IDP) for all managable users.
Assigning the Qlik roles like DataAdmin, TenantAdmin or Spaces works fine by mapping corresponding groups from KeyCloak.
Unfortunately there is no such field for Qlik's User Entitlement (Analyzer / Professional). Or at least I couln't spot it.
Since I do not want that every new user obtains automatically the Professional Entitlement, I've turned off the corresponding switch in the settings "Enable dynamic assignment of professional users".
As a consequence I've to set the Entitlement manually after a new user's first login.
Does anybody have experiences with using KeyCloak as IDP? How do you handle Entitlements?
Thanks so much!