Dec 7, 2023 9:42:19 AM
Jul 13, 2018 3:06:47 AM
This guide provides step-by-step instruction on how to create an UDC that fetches users from AD in the most common way: default Active Directory UDC. The steps use LDAP Admin for testing the LDAP filter string.
For steps that do not require LDAP Admin see Qlik Sense: Configuring and testing LDAP filters for User Directory Connector
For connecting AD using Generic LDAP connector, follow article How to connect to Active Directory using the Generic LDAP Connector
Detailed steps:
1. Confirm current server is Central Node and Repository Service is running correctly.
2. In order to confirm AD connectivity, download a 3rd party tool called "LDAP Admin" and run it on current server.
3. In LDAP Admin, create a connection.
4. For the detailed information, consult your Domain Administrator.
5. Make sure the connection passes test.
6. Once connected, go to Search > Custom > set "Path" to the top level > Input appropriate LDAP filter. Make sure there are some users fetched successfully.
Contact Domain Administrator for any assistance.
Filter creation can refer to this article Qlik Sense: Configuring and testing LDAP filters for User Directory Connector
For any issues happening before this point, please contact Domain Administrator. For any issues happening after this point, please contact Qlik Support.
[VERY IMPORTANT] Before moving forward, confirm if there is any RootAdmin assigned to a domain user in Qlik Sense.
If there is, make sure that user appears in the search result of above filter otherwise it will be marked as inactive and could potentially lock users out from QMC. Also follow How to avoid the RootAdmin(s) from becoming inactive. But this step should not be relied on so please still make sure the filter fetches current RootAdmin.
7. Go to QMC > User directory connector > Create new > Active Directory:
Sync user data for existing users: Only uncheck this setting if you know the amount of users is reasonably low -- for instance, less than a thousand. If not sure, always keep it checked.
Path: LDAP://["host" used in step 3]
Username / password: Credentials used in step 3
Under certain conditions, these fields can be left blank.
Additional LDAP filter: Filter used in step 5
9. Hit Apply, go back and do a Sync. Confirm the Sync is successful.
10. Go to QMC > Users > Filter by "User directory". Confirm the users are fetched.
Note: if "Sync user data for existing users" is checked in step 8, this list might be shorter than expected. That is because UDC would not fetch the users who are not already in the list.
Again, for any issues happening before step 6, please contact Domain Administrator. For any issues happening after step 6, please contact Qlik Support.
