How to configure OIDC with Google Workspace on Qlik Sense Enterprise on Windows

[FabioSanchesRibeiro]

This article provides a guide on how to configure a Qlik Sense Enterprise on Windows Virtual Proxy with OIDC authentication.

This customization is provided as is. Qlik Support cannot provide continued support of the solution. For assistance, reach out to our Professional Services or engage in our active Integrations forum.

On Google Workspace

1. Follow the instructions in How To: Setting up OAuth 2.0 Google Cloud Platform
2. Create an OAuth client ID
   
   
   
   
3. Note your Client ID and Client Secret
4. Configure the Authorized redirect URIs
   
   
   
   Change the URIs per your environment's requirements.
   
   In this case I’m using the same app to authenticate Qlik Sense Client-Managed and Qlik Cloud as well.
   
   URIs must be a fully qualified domain name (FQDN) such as, https://qliksenseserver.domain.local.
   
   
5. Once finished, download the config json file

Setting up Qlik Sense for OIDC with Azure ID

1. Create a new virtual proxy in the Qlik Sense Management Console and configure it based on your requirements (such as choosing an Engine to load balance to, your host allow list, and associating a Proxy service).
2. Choose OIDC as the authentication method and configure it as follows:
   
   
   
   The fields to pay attention to are:
   
   
   • OpenID Connect metadata URI: https://accounts.google.com/.well-known/openid-configuration
   • Client ID: Can be found in the Google Console > Additional information
   • Client secret: Can be found in the Google Console > Client Secret, and is available when downloading the config json file
   • scope: openid email profile

Environment

• Qlik Sense Enterprise on Windows
• Google Workspace