Configuring Azure Blob Storage in Qlik Cloud

[Levi_Turner]

For this document, we will review how to set up an Azure Storage connection to an Azure Blob Storage container using Qlik Cloud.

Azure Configuration

1. Create an Azure Storage Account
   
   
   
   
2. Navigate to Firewalls and virtual networks
   
   
   
   
3. Include the IP addresses associated with your Qlik Cloud region in your allow list (Allowlisting domain names and IP addresses)
   
   You'll likely want to whitelist your own client IP as well as any other clients which will be used to push data into the container that you will later create
   
   
4. Navigate to Containers to create a new container
   
   
   
   
5. Upload the needed files
6. Navigate to Access Control (IAM)
7. Add role assignments and add the Storage Blob Data Owner and Storage Blob Data Reader roles for any users which will be configuring this data connection inside of Qlik Cloud
   
   
   
   
8. Navigate to Properties to access the URL which this container will have. Record this for use inside of Qlik Cloud
   
   

Qlik Cloud

1. Open up an app which exists in the desired space for this connection / in the space > Data section create a new data connection > Select the Azure Storage type
   
   
   
   
2. Enter the Blob Container path recorded previously (it will be in the format of https://<YourStorageAccount>.blob.core.windows.net/<YourContainer>) and select Authenticate.
   
   
   
   
3. You may need to authenticate into Azure using your organization's authentication mechanism. After authentication you will need to allow the Qlik Web Connectors to access the data inside of this container.
   
   
   
   
4. Qlik's Web Connectors will bring you to a screen where there is an Authentication code. Copy this code
   
   
   
   
5. Navigate back to the Qlik SaaS screen to paste this code into the connection and select Verify.
   
   
   
   
6. After successful verification of this token, the Azure Storage Connection will show a status of authenticated.
   
   
   
   
7. Save your data connection with a meaningful name.
8. Load data from your data connection
   
   
   
   

[sergio4]

This is the error I am facing during the authentication process.

Protocol version

No matter what option I choose while creating the connection to azure storage. This is happening every time. Any idea?

[Francisco_Fernandez]

Hi sergio4,

Are you using a free account?  If so could you please try to use a non-free account to check if the issue persists?

[sergio4]

Hi,

It is not a free account. 

[shaybitton]

Hi,

we are having this problem :

https://support.qlik.com/articles/000110862 and it leads us to the current post and 

configuration need to be made detailed on another Qlik Help page  :

https://help.qlik.com/en-US/connectors/Subsystems/Web_Storage_Provider_Connectors_help/Content/Conne...

and the problem still exist. no need to whitlist IP's  since the tested blob can be accessed from all networks includ the internet.

what else can it be?

Thanks for your assistance.

@Levi_Turner  @Francisco_Fernandez 

[Francisco_Fernandez]

Hi @shaybitton ,

Probably the best option here is to open a support case since we would need more information to fully understand your problem and help you.

Best regards,

[shaybitton]

hi @Francisco_Fernandez 

Surprisingly, the azure owner isn't enough for this connector eventough it has read-write permissions.

so in order to solve this i had to allocate  the roles below :

• Storage Blob Data Contributer
• Storage Blob Data Owner

Thanks,

Shay

[DOD]

Hi @sergio4 ,

Did you manage to resolve that issue you reported above?

"We are unable to issue tokens from this API version on the MSA tenant. Please contact the application vendor as they need to use version 2.0 of the protocol to support this."

We're now facing a similar error. Our connection to Azure Storage was working fine until recently. I tried to re-create a connection and I'm getting this error. The existing connection is failing also.

Thanks,

Dod

[jorono]

Dear all, 

We are trying to connect to Azure Storage Account, we grant the described permissions in this note but we get a 400 error. 

Any idea?

[Kartik2]

@jorono ,I'm facing the same error ,have you managed to resolve that