Enabled SSO with AzureAD, now same user shows twice from 2 directories?

[Anonymous]

Hi all, wondering if anyone has come across this.

A client has QLIK set up, and originally they were just using their on-premise active directory to get the users in QLIk and assign them permissions etc.

We have directorysync so those domain users, show up in Azure AD. We then added the qlik enterprise app, and enabled single-sign on with SAML.

That all works fine, but the first time the user logs into QLIK from AzureAD, it creates a SECOND user in the Qlik list of users.

The first one shows User directory: DOMAIN (placeholder of local domain name)

The second one shows User directory: AZURE

This is frustrating because we assigned permissions to all the local users, and now the AZURE users don't show up until after the first time they log in to Qlik via the AzureAD app.

Is there we a way we can pre-populate all the users into the Qlik user list, but from the AZURE directory? Otherwise the first time the users log in, they have no reports/permissions/anything assigned to them

[nicolaskaiser]

Hi Nick,

Did you set it up with the standard SAML attribute for User Directory? In the pdf tutorial it is on [AZURE] (like in the picture attached to my post)

Did you try with your domain name as attribute?

If yes, did you manage to map the user names with the ones loaded from the LDAP or did it create doubles?

Regards

Nicolas

[BoB_Qlik_Support]

Hi,

I am facing a similar issue.
We are using on-premise active directory to get the users in QLIk and assign them permissions etc.
This ( on-premise active directory) works using the AD id.
However after enableing single-sign on with SAML users , a second user shows up with the email id(not AD id) .
So now I need to replcilate the user access on email id .
Is there a way SSO can be achieved via AD id , such that existing user access works?
Also, is it possible to activate multiple accounts of single user from same user directory(one with AD id and other with email) (say AD id- XX1234 , mail - xx@abc.com  both synced from same user directory -DIR1)