Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Sep 5, 2024 3:40:02 AM
Mar 13, 2020 5:39:43 AM
Multi-Factor Authentication (MFA) adds additional security for logging into Qlik Cloud Services. Qlik recommends enabling MFA on your Qlik account.
If the device used for MFA is being replaced, or if MFA needs to be disabled temporarily, this can be achieved in your My Qlik Portal.
Unable to log in? Contact Qlik Support as the user who requires MFA to be reset or disabled. We will be unable to assist if a different user requests the reset.
hi @Sonja_Bauernfeind and @Jamie_Gregory
it is possible to activate MFA to ALL tenant users once?
it also possible to DISABLE "reset/remove" button ?
I don't want that each user can decide if the mfa auth is active or not.
This would be a TENANT admin right.
thanks for helping me
Hello @acardella
MFA cannot currently be enforced for QlikID users (different QlikIDs can be used on different tenants). If you require MFA to be mandatory, you can bring your own IdP with a Qlik Sense SaaS Enterprise subscription (not available for Business subscriptions).
In addition, we have an active suggestion gathering feedback currently which may interest you: Enforced MFA and/or Google SSO for Qlik Sense Business SaaS
All the best,
Sonja
In a time of growing concern about security risks, I think the ON/OFF on MFA should be at TENANT level, not at single user level.
however...
Is the BYOIDP request made when the tenant is activated?
We have a customer with QSEE with the specific request to activate MFA and this can be a good lever to migrate it to the cloud.
If I need to use an external IDP also in the cloud then I can configure onpremise authentication via SAML/OIDC and keep everything where it is now
thanks
Hello @acardella
I understand the requirement and would urge you to provide your feedback and vote on the idea that I linked above. We also have an internal product suggestion active, but the more feedback we can gather from our customers in the ideation section, the better.
If you are moving a customer from an Enterprise Solution (Qlik Sense Enterprise on Windows) over to the Cloud, using the Enterprise subscription is recommended to make use of its enterprise-level capabilities. Including giving you (and your customer) control over what IdP you wish to use: Identity providers.
All the best,
Sonja
thanks Sonja.
i don't know why... but i'm unable to login at ideation.qlik.com.
there's some request to do to be enable ?
thanks
Hello @acardella
It should be enabled for everyone by default. If it gives you trouble, try this:
Hope this helps!
thanks.
it was enough to connect to the home page and click "Now click authenticate me"
i did it
thanks
Hi @Sonja_Bauernfeind Is there any way we can centrally reset the MFA? We have a user that got locked out of Qlik Cloud and also cannot find the recovery key anymore.
Hello @Linda95
A quick chat with Support would be required here. But I also recommend logging an idea for this to surface the need for an administrator managed reset functionality.
All the best,
Sonja