Qlik Sense: "Extended security environment" option explained

[Daniel_Seo]

You can enable the Extended Security Environment option in the Qlik Sense Management Console. 

What does the setting accomplish?

When this option is on(checked), Qlik Sense Proxy Service(QPS) includes additional information(OS, device, browser, and IP.) in the security header. With this additional header, Qlik Sense Engine can then distinguish sessions from different devices/browser/IP despite from the same user.  Then Qlik Sense Engine only allows one session to be opened for the same app. 

Please note, the user still can access to different devices/browsers to open the different apps with the same user account. 

When this option is off(unchecked), QES is unable to distinguish the different origins of the connection. That allows a user to re-use an existing session across different browsers/devices/IP.

For example: let's see how QES works differently in both situations:

1. User A logs into HUB and opens an App using his desktop computer.
2. In QES, Session #1 is created for this action.
3. User A switches to his laptop and opens the same App.
4. Now depending on the setting, QES works in two different ways:
   • "Extended security environment" is off(unchecked): QES reuses Session #1 to serve both devices. As a result, any selection User A made on the laptop will reflect to desktop and vice versa.
   • "Extended security environment" is on(checked): QES detects the request is from a different origin and terminates Session #1. On User A's desktop, a dialog shows up to inform this termination. Session #2 is created to serve the user from his laptop.(*)

To enable the setting:

1. Open the Qlik Sense Management Console
2. Navigate to the Virtual Proxy where you want to enable the feature
3. Open the Virtual Proxy
4. Enable the Advanced options
5. Check Extended Security Environment

Related Content:

How to count sessions in Qlik Sense 

Environment:

Qlik Sense Enterprise on Windows 

[mbespartochnyy]

I'd like to get a clarification on this sentence:

"Qlik Sense Engine only allows one session to be opened for the same app."

For example, if five different users will try to access the same app, will Qlik Sense Engine terminate user's session when some other user will try to access the same app and only allow one user to use the app at a time?

[Sonja_Bauernfeind]

Hello @mbespartochnyy 

This does not affect different users. So if user A opens Sense app on their desktop, then User B does the same, nothing happens. If, however, User A opens the Sense app on desktop and then on an iPad, the previous session is terminated.