Hi Community
We have an existing UDC that connects to out internal AD server via LDAP and fetches user group information from there.
Existing UDC has got domain named as: ALPHA-DOMAIN\USER1
Our authentication mechanism is using same domain [ALPHA-DOMAIN] via windows based NTLM authentication as all of the users by default belong to that domain.
As we have issues in managing our AD groups we want to manage the authorization by introducing custom groups for which information will be stored at separate source. In our case it is BQ tables where user and group information is stored. We are planning to introduce another UDC with user directory name as ALPHA-ADFS to bring in the custom group related information for the same user (USER1) that belongs to domain ALPHA-DOMAIN.
I understand Qlik UDC doesn't allow you to use same user directory name if you already have an existing one. As a result this is leading to an issue where same user USER1 is treated as 2 different user coming from 2 domains ALPHA-DOMAIN and ALPHA-ADFS.
How to merge the information coming from AD server domain ALPHA-DOMAIN and a custom domain ALPHA-ADFS to treat users as same user? Please note we have quite a large user base with thousands of existing users and AD groups. We also don't want to discontinue using the existing AD group UDC. Hence the solution has to be robust, scalable and manageable from operations point of view.
Qlik Sense Enterprise on Windows @ankit_gupta20
