Solved: Authentication fails even though UDC syncs - Qlik Community

Lauri · ‎2017-07-25

I've installed Sense Enterprise (June 2017) on a remote server, which is across a WAN, and not part of our domain. The Active Directory UDC that I set up on it is able to sync users from our local Windows AD, but I can't log into the hub with user credentials.

The System Proxy log shows:

Command=Login;Result=403;ResultText=Error: Access Denied. 'TryLogin'

Is this expected behavior? I've heard that 3rd party products like Okta can be a solution, but I figured if the UDC works, then the authentication should too.

Lauri · ‎2017-07-27

I just (re)learned that the Sense server needs to be a member of the AD domain for it to be able to authenticate to AD. That's not an option for us, so I'll pursue other options.

Thanks for the idea, Pranav. I had allocated tokens.

View solution in original post

Anonymous · ‎2017-07-27

Hi Lauri - Have you allocated login tokens to this user group? Under QMC->Manage Resources->License and tokens->User access allocations.

Pranav

Lauri · ‎2017-07-27

I just (re)learned that the Sense server needs to be a member of the AD domain for it to be able to authenticate to AD. That's not an option for us, so I'll pursue other options.

Thanks for the idea, Pranav. I had allocated tokens.