How to Enable User Groups in Qlik Sense Enterprise SaaS

[Andre_Sostizzo]

This video demonstrates how to enable automatic user group creation when using Auth0 and Okta Identity Providers in Qlik Sense Enterprise SaaS.

This customization is provided as is. Qlik Support cannot provide continued support of the solution. For assistance, reach out to our Professional Services or engage in our active Integrations forum.

Please note: in order to make sure that Windows AD groups are sent from Okta to Qlik Cloud, make sure to:

1. modify the filter in the "Groups claim expression" to add the AD groups
2. allow groups to be read in OKTA API scopes

Please, refer to Okta support for instructions on how to do that.

Related Content:

• How to setup a Tenant and Identity Provider (Okta) on Qlik Cloud Services Deployment 
• How To: Configure Qlik Sense Enterprise SaaS to use Auth0 as an IdP  
• Example auth0 authentication setup with Qlik Sense Enterprise on Kubernetes 

[jfitz_chicago]

Very helpful. I'm using Auth0. I used Roles to store group info.

groups box = /https:~1~1qlik.com~1groups

Advanced options claims = email openid profile https://qlik.com/groups

I created an API with the permissions to read groups. (Not 100% sure I needed to do that)

And I created a Flow in the Post Login section (Actions > Flows > Login) that added groups to the response.

/**

 * @param {Event} event - Details about the user and the context in which they are logging in.

 * @param {PostLoginAPI} api - Interface whose methods can be used to change the behavior of the login.

 */

exports.onExecutePostLogin = async (event, api) => {

  const namespace = 'https://qlik.com';

  if (event.authorization) {

    api.idToken.setCustomClaim(`${namespace}/groups`, event.authorization.roles);

    api.accessToken.setCustomClaim(`${namespace}/groups`, event.authorization.roles);

  }

}