How to configure the WebSocket origin allow list and best practices

Sonja_Bauernfeind · Feb 13, 2025 2:51:48 AM

The WebSocket origin Allow List grants access to the hub from aliases and redirected addresses. This article explains how to configure the list and includes general DOs and DONTs.

To configure the WebSocket origin allow list:

Open the Qlik Sense Management Console
Navigate to Virtual Proxies
Select the Virtual Proxy you wish to modify
Double click the Virtual Proxy or choose Edit
Expand the Properties menu by selecting Advanced
Scroll down to locate the Host allow list
Modify the list accordingly and click Apply

Best Practices

Valid entries:

domain.com
subdomain.domain.com

Incorrect entries:

.domain.com
*.domain.com

Related Content:

"An error occurred Connection lost" or "Bad Request the http header is incorrect on Qlik Sense Hub"
Invalid entries in the Qlik Sense host allow list on the virtual proxy configuration

Ken_T · ‎2022-05-16

would this allow one environment to have mashups that can get js and css resources from another environment? example, we have an enterprise (soon to be saas, maybe) and a QAP. 2 different environments.... we develop mashups locally and and have to point to resources on the enterprise system with an absolute URL (soon to be saas maybe). can we whitelist things so that the QAP mashup can use css and js from another environment? so we don't have to edit the mashup for deployment to QAP, which we use for public deployment. we will be testing this soon, and I am not sure if it is a common scenario or not.

Sonja_Bauernfeind · ‎2022-05-17

Hello Ken,

I think it may be best if you posted this question over in our Qlik Sense Integration forum to connect with users and active support engineers about it. The topic is a bit too complex to cover in an article discussion.

All the best,

Sonja

fatinfazrizanor · ‎2023-01-17

Hi i have put the domain.com, and when i open the hub via the new url, it have the authentication login page as normal. But when i login, i cannot access with no error. the log in page keep appearing as it did not recognize my id.
I can login only if i use the original url.
Can you help what is the real problem?

Sonja_Bauernfeind · ‎2023-01-23

Hello @fatinfazrizanor

Changing the WebSocket Allow List will not affect authentication, and there may be something else at work here. I would suggest posting about your issue in our active Deployment & Management forum.

In the meantime, this might help: Problem logging in to QlikSense on the server using the dns-name & Cert question

All the best,
Sonja

SGMarquez · ‎2023-02-24

Gracias por las informaciones, el problema lo tenemos al acceder desde el sistema operativo de windows, si accedemos desde un ordenador Mac , movil iphone y un movil android si te permite, solo hay problemas con windows.

How to configure the WebSocket origin allow list and best practices