Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Qlik and ServiceNow Partner to Bring Trusted Enterprise Context into AI-Powered Workflows. Learn More!
cancel
Showing results for 
Search instead for 
Did you mean: 
pasgalbarra
Partner - Creator
Partner - Creator

Using and IDp

Hi Community,

We want to invite external users to our tenant and as we have an IDp already we can't send email invitations, the problem is that I don't know how to use the IDp that we have:

 

I am attaching an image of the IDp,  Can someone help me how to use it?

 

Thanks

Labels (2)
9 Replies
Eduardo_Monteiro
Partner - Creator II
Partner - Creator II

Hello @pasgalbarra 

If the ldp is already set up, the users should be able to log in. You can share the tenant URL.

Regards,

 

Eduardo Monteiro - Senior Support Engineer @ IPC Global
Follow me on my LinkedIn | Know IPC Global at ipc-global.com

chriscammers
Partner Ambassador
Partner Ambassador

What you have done is a good start but now you have to create a web app that will authenticate your external users who will then be passed from your web app to your Qlik tenant. The JWT configuration you showed is a token based authentcation method that allows your web app to tell qlik who a user is and by trust relationship Qlik will believeve it and if that user has permission to do stuff they will be allowed to do those things.

It seems to me you may be more interested in federated authentication through your microsoft identity provider which will be more secure and less custom coded.

pasgalbarra
Partner - Creator
Partner - Creator
Author

Hi @chriscammers ,

 

Thanks for the time to respond my query.

We have a Microsoft identity provider that we use for user inside the company, but now we want to invite some external users, to be honest I am very lost here, but with your comment do you mean to create another Microsoft identity provider? And the domain is the external user?

If you can elaborate on your solution (federated authentication through your microsoft identity provider) I will really appreciate.

 

Thanks

pasgalbarra
Partner - Creator
Partner - Creator
Author

Hi @Eduardo_Monteiro ,

 

I want specific user to have access to the tenant, what do you mean by share the tenant URL and they should be able to login?

 

Thanks

Eduardo_Monteiro
Partner - Creator II
Partner - Creator II

Hi @pasgalbarra 

Like @chriscammers mentioned, you might be looking for federated authentication.

Please check the following links: 

Identity providers in Qlik Cloud | Qlik Cloud Help

Configuring an interactive OIDC IdP | Qlik Cloud Help

Keep in mind that you can only have one active IdP at a time.

BR,

Eduardo Monteiro - Senior Support Engineer @ IPC Global
Follow me on my LinkedIn | Know IPC Global at ipc-global.com

hugo_andrade
Partner - Specialist
Partner - Specialist

@pasgalbarra ,

JWT is meant for programmatic access. You would have to check what is the process within your portal to create one user.

Also, please confirm you are Tenant Admin, in order to invite users. Since your JWT IdP is not interactive, it should not prevent you from inviting users from the console, as long as you have the right roles.

Live and Breathe Qlik & AWS.
Follow me on my LinkedIn | Know IPC Global at ipc-global.com

pasgalbarra
Partner - Creator
Partner - Creator
Author

Hi @hugo_andrade ,

I am tenant admin, but I cant send invitation from console  (see image)

 

thanks for your help

hugo_andrade
Partner - Specialist
Partner - Specialist

@pasgalbarra 

What happens when you access the portal with a new account? 

On our implementations, we handle the User creation workflow within the portal itself. It is worth checking.

Live and Breathe Qlik & AWS.
Follow me on my LinkedIn | Know IPC Global at ipc-global.com

vighnesh_gawad
Partner - Creator
Partner - Creator

Are external users part of IDP that you have setup for qlik sense? If not then you cant use this IDP for external users.  Also in Qlikcloud, you cant use multiple Idp at same time. 

As other suggested what you are probably looking for is  probably Identity federation. Check out below support article.

https://community.qlik.com/t5/Official-Support-Articles/Using-Multiple-concurrent-Identity-Providers... 

Regards, Vighnesh Gawad
Connect with me on LinkedIn | GitHub