Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Oct 21, 2020 2:07:09 PM
Oct 21, 2020 10:47:31 AM
This video is part of the Qlik Fix Video series. If you found this video useful, check out the other Qlik Fix Videos.
This video demonstrates how to use LDAP filters and common examples when setting up Qlik Sense User Directory Connector (UDC).
Here is a link to more information in the Support Knowledge Base:
Qlik Sense: Configuring and testing LDAP filters for User Directory Connector
Video Transcript:
Hi and welcome to Qlik Fix!
This video demonstrates how to use LDAP filters and common examples when setting up Qlik Sense User Directory Connector (UDC).
Qlik Sense uses the UDC to synchronize and retrieve new user entries from the supported User Directory service or database of choice.
When creating a UDC, the default behavior is to only synchronize data for existing users.
Users are added to the Qlik Sense database dynamically as they use their credentials or are authenticated via SSO when accessing the Hub or QMC.
It is possible however to disable the setting "Sync user data for existing users", which will result in all available users being retrieved and added to the Qlik Sense database.
In this scenario, when connecting to a Directory Service, it is recommended that an LDAP filter is put in place in order to help retrieving only the relevant users.
The RFC for "String Representation of LDAP Search filters" can be reviewed under the this location. (https://tools.ietf.org/html/rfc2254)
Search string syntax information and examples can be found in TechNet on the article "LDAP Syntax Filters" shown here. (https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filter...)
As an example, we will use the following string to retrieve all users under the Active Directory Security Group "Qlik Sense Users".
This string searches for members of the specific group which has the DistinguishedName value as stated here.
This value can be found by enabling Advanced Features in the Active Directory Users and Computers console.
Then under the Group's properties, under Attribute Editor, find the distinguishedName value.
After synchronizing the UDC we can see the remaining users are imported.
Another common filter for retrieving all users within all nested groups is shown here.
This string contains a matching rule defined by LDAP that acts as an extended match operator, which allows for recursive searches.
See more information under the following Microsoft documentation website. (https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax)
In this example we see that Group0 is a member of "Qlik Sense Users" group, and the members of Group0 were now imported due to the recursive search.
Keep in mind that the LDAP filter string can be tested directly using the AD Users and Computers console.
To do so right-click the domain name, then select Find. Specify this as a Custom Search, and select the Advanced tab.
Here the search strings can be tested before applying them to the Qlik Sense UDC.
If you’d like more information,
search for answers using the unified search tool on the Support Portal.
It searches across the support knowledge base, Qlik Community, Qlik Help site, and Qlik YouTube channels.
Take advantage of the expertise of peers, product experts, and technical support engineers by asking a question in a Qlik Product Forum on Qlik Community.
And don’t forget to subscribe to the Support Updates Blog.
Thanks for watching!
Attached is a downloadable .mp4 video file for those who cannot view YouTube videos.
#QlikSupport
