setting up Qlik Sense integration with Azure AD Application Proxy

[daveatkins]

We are setting up Azure AD application proxy to allow access to QlikSense through firewall and found this white paper:

https://community.qlik.com/t5/Technology-Partners-Ecosystem-Documents/Azure-AD-Application-Proxy/ta-...

but the white paper does not provide very specific instructions or context. Can someone help with these questions:

1. to  create a Kerberos Service Principal Name  -

a) assume these are command line commands to execute on the server, cmd run as administrator?

b) paper says "If the Qlik Sense Proxy service is running as QLIKEMM\qlik," - From "net start," the service is running as "Qlik Sense Proxy Service" - is there some other id somewhere or would I just change"

setspn.exe -U -S HTTP/sense.qlikemm.com QLIKEMM\qlik

to

setspn.exe -U -S HTTP/myserverurl.mycompany.com "Qlik Sense Proxy Service"

2. in order to set up kerberos authentication, instructions are to modify the virtual proxy and proxy settings in the QMC: "Using the Qlik Sense Management Console: edit the Authentication properties of the Virtual Proxy and adjust the Windows authentication pattern from default Windows to Mozilla to support Single SignOn from not-only Windows desktop browsers; edit the Ports properties of the Proxy and enable Kerberos authentication."

does this mean to edit the existing configuration of the virtual proxy to change the free text "Windows" to "Mozilla" and then go to the bound proxy

and check the box for kerberos?

Will this cause problems for existing Windows users or is this safe to do? Do I need to restart services after making these changes?

[PadmaPriya]

Hello @daveatkins 

Please have a look at below article:

Tutorial: Azure Active Directory integration with Qlik Sense Enterprise | Microsoft Docs

Thanks,

Padma Priya

Qlik Sense 

[daveatkins]

ok, yes, I have read that. What I would like is if someone could answer my questions that I posted because it seems like there were only a few things to be done