Qlik Sense Mobile SaaS client fails to connect with "Error Logging In" while a third party Identity Provider is in use

Daniele_Purrone · Nov 24, 2023 4:05:06 AM

Accessing the Qlik Cloud tenant using the Qlik Sense Mobile app fails. No log in page appears and the user is immediately kicked out and shown the error message:

Error Logging In

error logging in.png

Analysis of the Qlik Sense Mobile log files reveals:

ERROR | Cannot login user: Invalid scope: The requested scope is not registered for this client

The error indicates that the IdP does not allow the offline scope for Qlik Sense Mobile.

Resolution

Qlik Cloud Mobile SaaS supports a specific set of identity providers. For a supported list, see Qlik Sense Mobile SaaS and identity providers.

IdPs not listed may work, but functionality cannot be guaranteed or supported.

This article provides best-effort information for using IdPs. The information is provided as-is and is to be used at your own discretion. No support can be provided.

There are two possible workarounds avaiable:

RECOMMENDED. Enable the offline_access scope for the tenant at the IdP side. Contact your IdP administrator for details.
Should option one (1) be not possible, disable offline access:
1. Open the Qlik Cloud Management Console
2. Open your Identity Provider settings
3. Enable Block offline_access
  
  With this setting enabled, Qlik Sense Mobile client users will now be required to regularly log in every six hours. Users connecting via browsers won't be affected. See also "How often does a Qlik Sense Mobile User have to log in?
  
  Block offline access

Cause:

IdP blocking offline access

Qlik Sense Mobile SaaS client fails to connect with "Error Logging In" while a third party Identity Provider is in use