Qlik Cloud: Read user information from ID token for authentication with Okta

[Caterina_Fruci]

Qlik Cloud allows for the configuration of independent identity providers, including Okta. The setup procedure for Okta and Qlik Cloud can be found here: How to configure Qlik Cloud with Okta.

During the setup process, you will be required to add an Authorization Server, an option which is only available if you have purchased Okta's API Access Management. Qlik provides a workaround in case you have not purchased this add-on and therefore do not have the Authorization Server option.

The workaround consists of selecting the "ADFS" provider while configuring Identity Provider in the Qlik Cloud management console, which will force Qlik Cloud to read the user information from the ID token instead of the userinfo endpoint.

 

Resolution

Follow the steps outlined in How to configure Qlik Cloud with Okta, with the exception of configuring the Identity Provider in the Qlik Cloud Management console differently and skipping step 12 (adding the Authorization Server). 

1. Open the Qlik Cloud Management Console and browse to Identity Providers 
2. Locate the Identy Provider you wish to modify or click Create New
3. Instead of applying Okta as the Provider, choose ADFS
4. Leave all other settings relevant to Okta, pointing the ADFS discovery URL parameter to the Okta URL.
   
   

Related Content 

How to configure Qlik Cloud with Okta
Identity Providers
Custom Auth Servers VS Org Auth Servers: https://developer.okta.com/docs/concepts/auth-servers/

Environment

Qlik Cloud 

[obeyaztas]

I still can't setup the connection with OKTA. Getting the error:

Your request resulted in an error. The 'redirect_uri' parameter must be a Login redirect URI in the client app settings:

I think it's something very small... But who can help

[hakeemakibu]

Hi @Caterina_Fruci I tried the above and got the same error as @obeyaztas 
Error: The 'redirect_uri' parameter must be a Login redirect URI in the client app settings:

[Caterina_Fruci]

Hi @hakeemakibu & @obeyaztas 

the error you are reporting is due to the fact that you are using the tenant alias hostname instead of the tenant hostname shown in How-to-configure-Qlik-Cloud-with-Okta in the step 7. Thanks! 

[hakeemakibu]

Hi @Caterina_Fruci, that's not actually the case, I used the actual tenant hostname not the alias.

[Caterina_Fruci]

@hakeemakibu are you using the tenanthostname in Okta ?
In that case , I will suggest you open a Support case to look into it in detail.

Thank you.