AD INTEGRATION QLIKSENSE USERS DOES NOT ASKING FOR CREDENTIAL AT LOGIN!

[abhaysingh]

HEY GUYS,

Hope you are doing well,

I have integrated the Active Directory and fetching the users from it, every thing goes fine.

One concern is,

Let say there are 2 users user1 and user2.... User1 has user access pass, User2 does not have user access pass.

User1 is the AD user and user2 in Non AD user,  when user1 is already logged in into their machine with their Credential and try to open the Published Qliksense application, it will not asking for credentials.

when i m logged into different machine which is part of Active Directory (User2) , and try to open the published application it is giving me error no access pass. because i have not assigned any Token to User2.

Now my question is that, In a machine i m logged in to user2 and want to see the published application with User1 credential at user2 machine. How i can do that??

in qlikview we do have NTFS and DMS Authorization to overcome this. we need to convert NTFS to DMS.

in qliksense how we can do this?

Hopw m clear.

Thanks

Abhay

[Gysbert_Wassenaar]

Now my question is that, In a machine i m logged in to user2 and want to see the published application with User1 credential at user2 machine. How i can do that??

Log out on your machine as user2 and log on again on your machine as user1.

[abhaysingh]

yes that could be possible solution but can't we give the option to ask credential  evrytime ?

or is their any restriction like , user can only allowed to login on  5 machine and 5 browsers?

Let it be the machine would be anyone logged through any user?

Regards

Abhay

[Gysbert_Wassenaar]

There's no restriction. It's simply that your browser presents the AD account credentials to the qlik sense proxy and if that proxy is configured to use AD then you'll be authenticated using the AD account credentials. If you don't want that then configure the proxy to use another user directory that doesn't use AD accounts.

[dionverbeke]

Use form based authentication.

It is currently undocumented, but please follow this:

Prompt connection Qlik Sense

Dion

[simondachstr]

Wouldn't running the browser with different credentials solve his use case?

[Gysbert_Wassenaar]

Yes, if your browser doesn't support windows authentication pattern in the User Agent header or you can make your browser send a different User Agent header then that works too.

[calvin_wee]

Hi,

We have similar requirements in our environment and still in progress of exploring.

What we have done includes:

Create second virtual proxy serving different needs.

- First proxy is using default for AD users along with system repository services.

- Second proxy is with a prefix using FORM login.

To add second Proxy, you need to specify a PREFIX (e.g. using selflogin) in the setting and change Windows Authentication pattern under Authentication from WINDOWS to FORMS. Release this different URL to those on self login (e.g. bi.domain.com/selflogin/hub)

When we access using the second proxy, we faced " load balancing module did not return any engine service'

We think we are heading the right direction and fixing the above should solve the requirements.

Any lights in this?