Qlik Community

New to Qlik Sense

Discussion board where members can get started with Qlik Sense.

cpalbrecht
Contributor

Qlik Sense SSO behind NGINX reverse proxy

My Qlik Sense server is running online on an AWS EC2 instance with a public IP address.  I am using Okta with SAML as a single sign on service. Everything is working fine.

But now I want to remove the public IP address and move the Qlik Sense server to a private subnet behind a NGINX in a public subnet. So the only public endpoint is NGINX. To reach the Qlik Sense server I have to go through NGINX.

I tried to configure NGINX to forward all requests. But it is not working. Lets say my public endpoint is: qlik.server.public. When I am calling qlik.server.puplic/okta/hub I get the Okta Login Screen. And after logging in, I get a screen displaying: Signing in to Qlik Sense... But nothing more. NGINX should pass the requests to qlik.server.local.

Does anybody know ho to configure NGINX to forward SSO SAML Authentication and so on?

Thanks for helping me!

BR

1 Solution

Accepted Solutions
agigliotti
Honored Contributor II

Re: Qlik Sense SSO behind NGINX reverse proxy

check your proxy and virtual proxy settings for load balance on servers.

4 Replies
agigliotti
Honored Contributor II

Re: Qlik Sense SSO behind NGINX reverse proxy

to investigate deeper i suggest you to take a look at your Qlik Sense server logs files, maybe they can helps to understand what is going on.

cpalbrecht
Contributor

Re: Qlik Sense SSO behind NGINX reverse proxy

Now it is running. I forgot to use http_upgrade. I didn't know that there is a websocket connection.

I can login to QMC. But when I am trying to connect to the HUB, I'm getting the following message:

qlikproxy.PNG

agigliotti
Honored Contributor II

Re: Qlik Sense SSO behind NGINX reverse proxy

check your proxy and virtual proxy settings for load balance on servers.

cpalbrecht
Contributor

Re: Qlik Sense SSO behind NGINX reverse proxy

My configured node for load balancer was gone. After adding the node again, everything works fine! Thanks!