Does Qlik Cloud SaaS Tenant support custom domains?

[Jason_ca]

Hi,

We are trying to implement JWT authentication to Qlik Cloud, but in order for this to work, the 3rd party cookie needs to be enabled in the browser side.  Basically we want to achieve a SSO workflow like following, but the concern is the 3rd party cookies, so we are wondering if Qlik can support custom domains so that both the JWT auth request and Qlik Auth Session Cookies will be on the same domain, which will avoid the 3rd party cookie issues. From what we know we can only set up alias subdomain for our tenant,  but the main domain is still Qlik.

User Login -> Web App -> JWT Auth -> Qlik Cloud

Thanks.

Jason

[Vinay_B · Accepted solution]

Hi @Jason_ca,

Qlik SaaS doesn't support custom domain as you asked. But you can integrate it via iFrame, but then is is required to authenticate via JWT.

https://help.qlik.com/en-US/cloud-services/Subsystems/Hub/Content/Sense_Hub/Admin/SaaS-idp-intro.htm

I hope this helps!

[Jason_ca]

@Vinay_B  thank you for your response, Yes we are using JWT, but with iFrame I'm getting an error:

Refused to frame '.... because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self'

without using iFrame, we can get it to work but it requires the browser to allow 3rd party cookie, which is the issue we are facing.

Thanks.

Jason

[Francisco_Fernandez · Accepted solution]

hello @Jason_ca ,

Using a tenant admin, please access the following link (please remember to change the tenant name and GEO zone)

https://yourtenant.eu.qlikcloud.com/console/csp/

And add the content security policy as described in the following video:

https://youtu.be/TqY8kEHIwn8?t=45

Additional information:

https://help.qlik.com/en-US/cloud-services/Subsystems/Hub/Content/Sense_Hub/Admin/mc-administer-cont...

https://community.qlik.com/t5/Knowledge/Qlik-Sense-Enterprise-SaaS-How-to-embed-a-chart-in-an-iFrame...

Best regards,

Francisco