Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hello everyone,
after following the guide to configure an OIDC authentication with an external IdP, i have encountered a problem, once the authentication ends and the user is logged, it receives a blank screen ( Attachment1 ).
Controlling the Proxy > Audit Logs the user results authenticated, controlling instead the Proxy > Trace Logs i find this warning:
WARN Audit.Proxy.Proxy.Core.Connection.Validation.ConnectionDataValidator Http request Host is not allowed.
Within the virtual proxy i added the host in both forms e.s. "qlik.company.com", "https://qlik.company.com" and in both forms with the virtual proxy right after e.s. "qlik.company.com/auth", as i have added the host for the OpenID Configuration in both forms. As for load balancing it is using the central proxy.
At this point i have no idea how to proceed any further, i even tried disabling the firewall , clearing all browser cache, using another browser, still with no result.
If it can somehow help i attached the configuration ( Attachment2 ), it may seem odd at first but it was the only way to make the authorization sequences work.
Hoping that i have given enough information on the problem, i kindly ask for help in solving this problem.
Thank you in advance.
Hi Alan_Slaughter,
thanks for replying, the problem was already solved.
It seems that within the nginx configuration of the reverse-proxy some Headers were missing, especially these two:
# Needed for NTLM authentication
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
without these it would not return to Qlik a Websocket with authorization to view any content leaving the page blank.
I will leave a basic nginx config as attachment for anyone that needs a reference in case of a problem like this.
Thanks again.
Hi MatPik, maybe this would be helpful:
https://community.qlik.com/t5/Official-Support-Articles/Invalid-entries-in-the-Qlik-Sense-host-allow...
Hi Alan_Slaughter,
thanks for replying, the problem was already solved.
It seems that within the nginx configuration of the reverse-proxy some Headers were missing, especially these two:
# Needed for NTLM authentication
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
without these it would not return to Qlik a Websocket with authorization to view any content leaving the page blank.
I will leave a basic nginx config as attachment for anyone that needs a reference in case of a problem like this.
Thanks again.