Using and IDp

[pasgalbarra]

Hi Community,

We want to invite external users to our tenant and as we have an IDp already we can't send email invitations, the problem is that I don't know how to use the IDp that we have:

I am attaching an image of the IDp,  Can someone help me how to use it?

Thanks

[pasgalbarra]

Thanks.

Looks like this is what we need.

[pasgalbarra]

Hi @vighnesh_gawad ,

I hope you are having a great time and supporting Argentina tomorrow 🙂

I created this post to understand the possibilities of adding external users, and identity federation sounds like the best option. However, I don't know if you have more details about how to do it. The link you shared is interesting, but it's Keycloak-oriented and I don't quite understand it

I have another post:

https://community.qlik.com/t5/Integration-Extension-APIs/Adding-External-users-to-QLik-Tenant/m-p/25...

Not sure if you can help me there.

Thanks in advance

[vighnesh_gawad]

Hi @pasgalbarra ,

I don't really follow football 😄 though I watch F1 occasionally.

Regarding your question, if you're comfortable sharing a few more technical details in another post, it would help narrow things down. For eg, which SSO/Identity Provider are you trying to integrate (Microsoft Entra ID, Okta, Keycloak, Auth0)?

If you don't want to post those details publicly, feel free to send me a private message.

Also, have you already tried implementing the integration?
what approach did you take, and what issue are you running into?
That would make it easier to understand the scenario and suggest right approach.

[pasgalbarra]

Hi @vighnesh_gawad ,

Thanks for your time.

I am F1 fan as well, maybe I am wasting to much time with sports hehe

I am trying to understand the process (the plan is to do it with Microsoft Entra ID) to estimate the effort, but I am a bit lost on what would be done by Qlik side and what should I ask to Azure team

Thanks again

[vighnesh_gawad · Accepted solution]

Sure @pasgalbarra . If you look at the diagram in the support article I shared, there are two main steps:

1. Connect Qlik Cloud to the primary Idp (Keycloak in the example).

2. Set up identity federation between the primary and secondary Idp (Keycloak and Auth0 in the example).

In your case, it would be the same. You need to connect Qlik Cloud to your Microsoft Entra ID as  primary IdP, which you may have already done.

second step is setting up identity federation between your secondary IdP and Microsoft Entra ID. This is usually handled by the team that manages Microsoft Entra ID rather than the Qlik developer.

From the Qlik side, you can help with groups and user access for external users based on the article.