Qlik Community

Qlik Sense Deployment & Management

Discussion board where members learn more about Qlik Sense Installation, Deployment and Management.

Announcements
QlikWorld 2020: Join us May 11 - 14, 2020 in Phoenix, AZ. Register early and save $400. Learn More
vogel_jo
New Contributor

How to change user names?

Hi guys,

how can I change a user's name in QMC? Is that actually possible? The text field in QMC is greyed out for all users.

Context:

We are using SAML authentication to let users access Qlik Sense via Browser.

Whenever a new user authenticates, an account is created by Qlik, having its 'Name' and 'User ID' set to its gibberish company ID (something like t1234x567z). What we want is to set 'Name' to their actual given name, so that we can actually identify user accounts and map them to real people at our place. Sadly, SAML authentication can only map given names to special 'environment' attributes.

How can we achieve that? If not through QMC, is there any possibility to manually change user names, i.e. via some Database Connection?

Thanks in advance

Jonathan

1 Solution

Accepted Solutions
Employee
Employee

Re: How to change user names?

Hey Jonathan,

As gwassenaar‌ referenced, one way to handle this is going to be in the SAML config of the SAML virtual proxy. The difficulty here is that it really depends on your IdP on what precisely you should do. The general schema will be:

  • Determine whether you purely want the added claims of a Name value or whether you want to use another claims value for the userid
    • example in ADFS world: user@domain.tld vs. user
  • If you want to adjust the attribute for userid, then ensure that it is passed in the SAML response (I'm attaching a doc for an example in ADFS)
  • If you purely want to bring in more meta-data which persists with the user entry in the QMC, then you will want to use a UDC
    • This UDC can be hosted in a database or leverage flat files on disk
    • For a walk-through on setting up a database UDC then reference this doc https://qliksupport.force.com/articles/000009794 (there are others out there)
    • This work-flow would obviously mean that the meta-data of the user's name, etc, would need live in a system. If they only live in the IdP, then some ETL process needs to be setup to persist them outside of the IdP for consumption by Qlik Sense

Hope that helps.

View solution in original post

2 Replies
MVP & Luminary
MVP & Luminary

Re: How to change user names?

There's a SAML attribute mapping section when you configure a virtual proxy for SAML authentication. That's where you can map SAML attributes to Qlik Sense user attributes. See https://help.qlik.com/en-US/sense/June2018/Subsystems/ManagementConsole/Content/create-virtual-proxy....

You'll have to make sure your SAML messages contain the attributes you need, Qlik Sense can't do that for you since it's only on the receiving side.


talk is cheap, supply exceeds demand
Employee
Employee

Re: How to change user names?

Hey Jonathan,

As gwassenaar‌ referenced, one way to handle this is going to be in the SAML config of the SAML virtual proxy. The difficulty here is that it really depends on your IdP on what precisely you should do. The general schema will be:

  • Determine whether you purely want the added claims of a Name value or whether you want to use another claims value for the userid
    • example in ADFS world: user@domain.tld vs. user
  • If you want to adjust the attribute for userid, then ensure that it is passed in the SAML response (I'm attaching a doc for an example in ADFS)
  • If you purely want to bring in more meta-data which persists with the user entry in the QMC, then you will want to use a UDC
    • This UDC can be hosted in a database or leverage flat files on disk
    • For a walk-through on setting up a database UDC then reference this doc https://qliksupport.force.com/articles/000009794 (there are others out there)
    • This work-flow would obviously mean that the meta-data of the user's name, etc, would need live in a system. If they only live in the IdP, then some ETL process needs to be setup to persist them outside of the IdP for consumption by Qlik Sense

Hope that helps.

View solution in original post