How to change user names?

[vogel_jo]

Hi guys,

how can I change a user's name in QMC? Is that actually possible? The text field in QMC is greyed out for all users.

Context:

We are using SAML authentication to let users access Qlik Sense via Browser.

Whenever a new user authenticates, an account is created by Qlik, having its 'Name' and 'User ID' set to its gibberish company ID (something like t1234x567z). What we want is to set 'Name' to their actual given name, so that we can actually identify user accounts and map them to real people at our place. Sadly, SAML authentication can only map given names to special 'environment' attributes.

How can we achieve that? If not through QMC, is there any possibility to manually change user names, i.e. via some Database Connection?

Thanks in advance

Jonathan

[Gysbert_Wassenaar]

There's a SAML attribute mapping section when you configure a virtual proxy for SAML authentication. That's where you can map SAML attributes to Qlik Sense user attributes. See https://help.qlik.com/en-US/sense/June2018/Subsystems/ManagementConsole/Content/create-virtual-proxy....

You'll have to make sure your SAML messages contain the attributes you need, Qlik Sense can't do that for you since it's only on the receiving side.

[Levi_Turner · Accepted solution]

Hey Jonathan,

As gwassenaar‌ referenced, one way to handle this is going to be in the SAML config of the SAML virtual proxy. The difficulty here is that it really depends on your IdP on what precisely you should do. The general schema will be:

• Determine whether you purely want the added claims of a Name value or whether you want to use another claims value for the userid
  • example in ADFS world: user@domain.tld vs. user
• If you want to adjust the attribute for userid, then ensure that it is passed in the SAML response (I'm attaching a doc for an example in ADFS)
• If you purely want to bring in more meta-data which persists with the user entry in the QMC, then you will want to use a UDC
  • This UDC can be hosted in a database or leverage flat files on disk
  • For a walk-through on setting up a database UDC then reference this doc https://qliksupport.force.com/articles/000009794 (there are others out there)
  • This work-flow would obviously mean that the meta-data of the user's name, etc, would need live in a system. If they only live in the IdP, then some ETL process needs to be setup to persist them outside of the IdP for consumption by Qlik Sense

Hope that helps.