Active Directory authentication without joining server to domain

[celindho]

Hi,

Does anybody know of any methods where I could have Active Directory authentication on my (single machine site) Qlik Sense installation without joining my Qlik Sense server to the domain?

I.e., can I somehow configure either the default authentication module or Windows itself to validate usernames against the AD even though the server is not joined to the domain?

BR,

-Christian

[chriscammers]

Does anybody have any comments about this? I have a similar situation.

[kcli99cs]

I have also faced this issue.

Anybody has solution? Or confirm it should be no method up to that moment?

[celindho]

Hi,

I have not managed to solve my original issue yet. Neither can I confirm if it is possible or not.

BR,

-Christian

[chriscammers · Accepted solution]

I know it would be an additional project but without joining to the domain you could use ADFS with SAML.

The users would login on the AD server and using SAML tokens would be granted access to Qlik.

[Anonymous]

we are using comtarsia client  and comtarsia proxy for pool PC's to logon into several AD domains without domain joning. comtarsia is a very comprehensive product. you can define multiple logon tiles with customized label and logo for each AD domain and a central proxy service forwards the logon request to the selected domain. additionally a agent can synchronize the user accounts and passwords to local domains ....
comtarsia support is helpful by finding the right configuration.