SAML Authentication and NameID

[jeromehautecoeur]

Hi,

I have configured Qlik Sense for SAML authentication.

Something is uncleared to me regarding the usage of the SAML tag NameID.

Is it used by QlikSense to identify the user or does Qlik Sense only rely on the Attribute values?

For example, the IdP is answering this:

      <Subject>

         <NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">MyUser</NameID>

         <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">

            <SubjectConfirmationData InResponseTo="_cd32f856-e826-4e42-a094-e208157413ed" NotOnOrAfter="2020-07-07T13:08:17.536Z" Recipient="https://XXX:443/sso/samlauthn/" />

         </SubjectConfirmation>

      </Subject>

without any Attribute tag.

Do I have to ask the Identity Provider to add some Attributes in the SAML response or is it possible to make it work with only this information ?

If yes, what is the correct configuration for the virtual proxy ?

Regards,

Jerome