Qlik Sense Enterprise on Windows: How to sync custom attributes from Active Directory with Advanced LDAP

[Damien_V]

In the standard Active Directory Connector or Generic LDAP Connector, it is not possible to specify additional custom attributes to be synced to Qlik Sense. By using the Advanced LDAP connector, it is possible to sync additional attributes by specifying their names in the "Custom attributes" field. If there are several custom attributes to synchronize, they must be comma separated.

Resolution

Once custom attributes have been created in Active Directory, perform the below steps to synchronize them to Qlik Sense.

You can refer to How to Create a Custom Attribute in Active Directory | TechNet Articles on how to add custom attributes in Active Directory.

In this example, we created two custom attributes QlikCustomAttribute and QlikCustomAttributeTwo.

1. Create a new User Directory Connector with type "Advanced LDAP" in the Qlik Management Console.
2. Below are some general settings for a standard Active Directory setup
   
   
   
   
3. In the Directory Entry Attributes, set the user identifier to Person and input the attribute names in the "Custom attributes" section, comma-separated.
   
   
   
   
4. Apply the settings and synchronize the User Directory Connector.
5. In the "Users" section, when clicking on the information icon next to the user, you will now be able to see the custom attributes. Those custom attributes can be used in security rules and license assignment rules.
   
   
   

Environment:

Qlik Sense Enterprise on Windows