Using an IDP to automatically connect new users to a public space?

[TomHarpin]

I am near the end of my company's trial of Qlik Sense and I have one remaining hurdle I need help resolving.

I have built 5 small apps in Qlik as part of our company's upcoming marketing campaign. We will be speaking with many prospects in the upcoming weeks and months, and therefore we need to be able to provide access to these apps to them. Because of the number of potential prospects, it is not feasible for us to add each prospect as an analyst on our platform manually; we need to be able to have them sign up and log in on their own without any input from me.

I have been informed by my Qlik sales rep that one way to allow users to view our apps is to connect Qlik to an IDP and use that IDP to manage the user interactions. I followed the process written in this help article:
"Qlik Sense – Setting up Azure AD as your IDP integration with Qlik Cloud" (https://community.qlik.com/t5/Official-Support-Articles/How-To-Configure-Qlik-Sense-Enterprise-SaaS-.... I have confirmed that the process works because, after I set it up, I was able to see one of the apps in an embedded iframe on our website (www.equityrisksciences.com/qlik/), whereas before I set the IDP up I was unable to.

Next, since I used Azure to set up the IDP, I then set up "self-service sign-ups" for the group I had created in Azure. I followed the instructions seen here: https://learn.microsoft.com/en-us/azure/active-directory/external-identities/self-service-sign-up-us....

After doing this, I was able to create a sample account by opening a link to our Qlik installation in a private window: "https://[redacted].us.qlikcloud.com/" and following the prompt given. However, after logging in successfully, the sample account does not have access to the public space I created, and so I cannot see the apps I have put into it. What steps am I missing? What do I need to do to complete this process, so that when a user signs up for Qlik using our link, they can see the apps we have added to our public space?

Any help you have to offer is appreciated.

[NadiaB]

Hi @Anonymous 

How are you granting access to the Space, is it by group ?  

• Check in Azure that the user was successfully added to the group you are managing. 
• Verify the group is in SAAS

The users will still need the analyzer allocation that can be enabled in the QMC "Enable dynamic assignment of analyzer users".

• Check that the user got a Analyzer license in the QMC.

If nothing works, would you mind to attach a screenshot of the hub to see what the demo user is able to see?

Hope it helps. 

[TomHarpin]

Hi Nadia,

First of all, thanks for the quick reply!
Let me answer your follow-up questions in no particular order.

First, in Azure: The email I used to create my sample account is "resumes@equityrisksciences.com". That account is attached to something, as I am able to log into Qlik with it. However, I don't seem to be able to find that email anywhere in my lists of Azure users.

Qlik external users group

I have a group set up, called "Qlik external users", to which I have added the IDP I created as a member. Additionally, I have that group listed as a member in the enterprise application "ers-azure IdP". (This may be an infinite loop, I am aware.)

ers-azure IDP

Meanwhile, in my Qlik installation, I have several Groups from Azure added to the Members list for my public space "Client Portal" - however, I don't see the space "Qlik external users" as an available choice when I click "Add members".

Client Space list of members

Fortunately, "resumes@equityrisksciences.com" does have an Analyzer license assigned appropriately. That being said, we intend to employ an analyzer capacity pack for our external users, so this may not be as important a point.

Lastly, here is a screenshot of what I see after going to the Catalog in "resumes@equityrisksciences.com"'s account:

test account view

Thank you for the support!