Hi! connect Microsoft Azure Active Directory (AD) as a data source in Qlik SaaS for section access is a bit tricky, you’ll generally follow these steps:
Register an App in Azure AD:
Go to Azure Portal, navigate to Azure Active Directory > App registrations, and create a new application registration. Note down the Application (client) ID and Directory (tenant) ID. You’ll need these values in Qlik. Generate a Client Secret in the Certificates & secrets section, and store it securely.
Grant Permissions to the App: Assign the app Microsoft Graph API permissions to read group data. Go to API Permissions > Add a permission > Microsoft Graph > Application permissions and select the appropriate permissions like Group.Read.All. Grant Admin consent for the permissions.
Create a Web Connection in Qlik SaaS: In Qlik SaaS, go to Data Load Editor > Create New Connection > REST. Use the Microsoft Graph API endpoint for groups: https://graph.microsoft.com/v1.0/groups. Set up the connection using OAuth 2.0 with the Client ID, Tenant ID, and Client Secret you created in Azure AD. Configure authentication headers as per OAuth 2.0 requirements (the article you referenced likely outlines this in detail).
Load Azure AD Group Data: Use Qlik’s Data Load Editor to script the load, pulling data from Azure AD to use in your section access configuration. Ensure that you parse the group information (like id and displayName) in the format needed for your access control.
Test and Implement Section Access: Use the group information to create section access rules in your Qlik app. This may involve matching group IDs or names with users in your system.
