How to allow Anonymous Hub access in Qlik Sense Enterprise on Windows

[Sonja_Bauernfeind]

Three requirements need to be met in order to allow Anonymous users access to the Hub:

• The product must not be Qlik Sense Business or Qlik Sense Enterprise SaaS.
• The license must support anonymous access, see Which Qlik Sense Enterprise licenses support anonymous access?
• Proxy must be configured to allow Anonymous users
• A Stream dedicated to anonymous users must be created 

Useful information:

• Users who access Qlik Sense anonymously are identified as NONE\anonymousd9e61933-a7e5-4836-8540-5b137a600e69, where the GUID is a unique identifier.
• To create a license rule, granting login passes to anonymous users you can use two identifiers:
  • userDirectory=NONE 
  • user.IsAnonymous()

Configure the Proxy to allow Anonymous users

By default, anonymous access is disabled. The steps provided require a restart of the Proxy service after completion. 

1. Open the Qlik Sense Management Console.
2. Choose the Virtual Proxy to be used for anonymous access
3. Click Edit.
4. In the Properties menu (right side) choose Authentication
5. From the Anonymous access mode drop-down select Allow anonymous users
   
   
   
   

Set up a license rule 

Anonymous users will need to have a license rule available for them which gives them either an Analyzer Capacity License or a Login Access Token. The instructions in this article will focus on Analyzter Capacity Licenses. 

1. Open the Qlik Sense Management Console.
2. Navigate to License Management 
3. Click Analyzer capacity rules 
4. Click Create new 
5. Give the new rule a Name (mandatory) and Description (optional) 
6. Create one of two possible rules:
   1. In the Basic settings, select
      user: userDirectory =
      value: NONE
      
   2. In the Advanced settings (see Fig 2), provide the condition:
      user.IsAnonymous()
      
      Fig 2

       

7. Click Apply

Set up a Stream for anonymous access

You can use the default Everyone stream, which has already been set up for anonymous access, or create your own. 

We will create two rules. One to allow logged in (authenticated) users access and publishing permissions. One to allow anonymous user access, but no publishing permissons. Note that based on your requirements, this may need to modified. 

1. Go to the Qlik Sense Management Console
2. Go to Manage Content and Streams
3. Click Create New
4. Name your new Stream
5. Click Security Rules 
6. Click Create associated rule (see Fig 2) 
   This will be our "Everyone (anonymous) can read the stream." rule.
   
   Fig 3
7. Provide a Name (mandator) and Description (optional) 
8. In Basic only select Read 
9. In Advanced define
   Condition: user.IsAnonymous()
   Context: Only in hub
   
   See Fig 4. 
   
   Fig 4

    

10. Click Apply 
11. Click Create associated rule (see Fig 2)
    This will be our "Everyone (logged in) can access this stream and publish." rule.
12. Provide a Name (mandator) and Description (optional) 
13. In Basic only select Read and Publish.
14. In Advanced define
    Condition: !user.IsAnonymous()
    Context: Both in hub and QMC
15. Click Apply

Test!

We are now ready to test access. 

1. Go to the Qlik Sense Hub (hosted by the Virtual Proxy you have configured)
2. If you are logged in, log out.
   
   
   
   
3. Our new Anonymous stream is now avaiable.

[Sonja_Bauernfeind]

Hello @msabi 

This message means that no license has been assigned (or access pass, depending on your version of Qlik Sense). I would recommend reviewing if you a) have the correct license type for anonymous access and b) completed the Set up a license rule section in the article.

All the best,
Sonja 

[rohitgharat]

Hi @Sonja_Bauernfeind ,

Can we apply license rule for Analyzer access rule? I am using Qliksense Enterprise version  May 2021.

Please reply at earliest.

[msabi]

hello @Sonja_Bauernfeind 

I already followed it as below screenshot [1], but still no luck [2] 

[1]

[2]

[Sonja_Bauernfeind]

Hello @msabi and @rohitgharat 

Analyzer licenses do not support anonymous users. See Which Qlik Sense Enterprise licenses support anonymous access?

You need either:

• Token-Based: Using the Login Access Passes
• Core-Based (either QAP or Qlik Sense Enterprise)
• Capability-Based: By using the Capacity Analyzer licenses (Signed licenses)

[Noctis]

Hello Quick Question again,

so my unterstanding right now is that it is not possible to force authentificaton for Licensed User and let anonymous user to enter the same URL (Proxy) or am i missing something?

[Sonja_Bauernfeind]

Hello @Noctis 

You can set the proxy to allow anonymous access but otherwise also allow for sign-in. Meaning users can access it anonymously, but will need to log in if they want to make use of their licenses.

All the best,
Sonja