What are the limitation for users that access Qlik through SAML authentication and need to consume reports from NPrinting?

[Caio_CaminoskiEF]

Hello,

I have been facing many bumps when trying to configure NPrinting in our environment. Even though we have Qlik Sense server and NPrinting Server connected to the same domain, our main users access qlik sense using a SAML authentication, as they are not in the same domain of those machines.

We are currently about to setup the SAML authentication for the NPrinting server as well. However, I have already come to the sad surprise that there are quite a few limitations when it comes to the SAML authentication and the use of NPrinting. Would some expert help me clarify that?

First of all, I was expecting users to consume reports in 4 different ways:

1. Receiving reports by email through scheduled NPrinting tasks

2. Triggering report tasks through on-demand button in Qlik Sense

3. Downloading reports through Reports tab in qlik sense hub

4. Accessing reports through NewStand

I have seen that number 3 is not available for non-domain users. Can non-domain users still trigger reports through on-demand buttons? Are there limitations to access the NewStand? Are there problems with section access?

I have found it difficult to understand the whole picture when it comes to SAML authentication limitations and I also think there is a lack of communication on that. I would love some remarks on this topic as I believe it can help out more people with a similar environment.

All the best,

Caio Caminoski 

[Ruggero_Piccoli · Accepted solution]

Hi,

About SAML refer to https://help.qlik.com/en-US/nprinting/November2020/Content/NPrinting/DeployingQVNprinting/SAML.htm it lists also the limitations. 

On-Demand with Qlik Sense requires NTML authentication as listed in https://help.qlik.com/en-US/nprinting/November2020/Content/NPrinting/On-Demand/Create-Report-On-Dema....

Limitations on accessing the NewsStand depend on the security roles you assign to the user https://help.qlik.com/en-US/nprinting/November2020/Content/NPrinting/DeployingQVNprinting/Security-m.... For example if you give to a user the built in "NewsStand User" role the user can do everything in the NewsStand with reports from all Qlik NPrinting apps. You can also create your custom roles for example to give to a user only the right to view the NewsStand reports. 

Section access is supported with the details listed in https://help.qlik.com/en-US/nprinting/November2020/Content/NPrinting/DeployingQVNprinting/Section-ac.... To create a connection that uses section access you can follo the instructions in https://help.qlik.com/en-US/nprinting/November2020/Content/NPrinting/GettingStarted/HowCreateConnect...

I hope this helps.

Best Regards,

Ruggero

[Caio_CaminoskiEF]

Hello Ruggero,

Thank you for your reply. Then, from what I understand, out of the 4 ways I listed to get data from NPrinting, a user that access Qlik sense through SAML could only receive reports from scheduled NPrinting tasks (1) and/or access reports through the NewStand (4). 

I am not really sure I understand the details listed about Section Access. I guess I will have to do some testing. However, I really hope that works, otherwise NPrinting won't make a lot of sense in our environment.

Thanks again.

Best,

Caio 

[Ruggero_Piccoli]

Hi,

Yes, section access with Qlik Sense needs domain accounts instead delivery via email and NewsStand do not need it. In the NewsStand you can login with email and password. You can also send reports to folders but managing access to folders could mean the use of domain users too.

Best Regards,

Ruggero