The maximum number of parallel user connections for a single user in Qlik Sense is five (5). This can be exceeded by users by accident or by unexpected behavior.
Click here for Video Transcript
The related log file for this issue is:
C:\Programdata\Qlik\Sense\Log\Repository\Audit\AuditSecurity_Repository.txt
The related message reads:
Access was denied for User: 'Domain\USER', with AccessID '264ff070-6306-4f1b-85db-21a8468939b5', SessionID: 'e3cd957b-a501-4bec-a3f8-d35170a73efa', SessionCount: '5', Hostname: '::1', OperationType: 'UsageDenied'
Environment:
Resolution:
See How to count sessions in Qlik Sense on possible scenarios on when multiple sessions are created.
When the user is consuming too many sessions, they will need to wait until the first one has correctly timed out. This is dependent on the Qlik Sense configuration.
If none of those apply, and a user is not actively connecting more than 5 times, then the below should be investigated:
Service Account has a licence assigned and QMC interaction consumes sessions
See Qlik Sense April 2018 and later- Service account getting "You cannot access Qlik Sense because you h...
The end-user does not have a license/token assigned
In some instances, the error message may wrongfully be shown when no license/token was assigned to a user. Note that this should not be the case with the service account, as mentioned above.
iFrame access using an iOS device with Safari
iOS does not allow cookies from websites in iFrames without having first visited the embedded site directly.
To resolve this, access the site hosting the iFrame once. After that, cookies can be accepted.
The session is being resumed after the client device disconnected for an extended period of time
In the following scenarios, the client device is disconnected from Qlik Sense during an active session:
- Entering sleep mode
- Lost VPN connection
- Flight mode activated
- Lost network connection
When the session is resumed, all request sent to server contain the previous session cookie, which has expired during the disconnection. The requests with invalid session cookie leads to re-authentication for multiple requests, which leads to session count being rapidly exhausted.
This issue has been addressed and resolved in below releases, where Release Notes on "Handle 'invalid cookie' bursts in the Qlik Sense proxy Service" for additional configuration details.
- Qlik Sense Enterprise on Windows November 2019
- Qlik Sense Enterprise on Windows September 2019 Patch 1
- Qlik Sense Enterprise on Windows June 2019 Patch 6
- Qlik Sense Enterprise on Windows April 2019 Patch 5
- Qlik Sense Enterprise on Windows February 2019 Patch 6
Database maintenance of closed sessions not working correctly
Verify if any of the following tables in the Qlik Sense Repository Database (QSR) includes 5 or more records for the user that are older than 5 minutes:
- LicenseProfessionalAccessUsages
- LicenceUserAccessUsages
- LicenseAnalyzerAccessUsage
If that is the case, the maintenance/cleanup of old sessions might not be working properly.
This issue has been addressed and resolved in the below releases.
- Qlik Sense Enterprise on Windows February 2020
- Qlik Sense Enterprise on Windows November 2019 Patch 1
- Qlik Sense Enterprise on Windows September 2019 Patch 2
- Qlik Sense Enterprise on Windows June 2019 Patch 6
