No access pass provided on first login

[adam_groenbeck]

Hi,

We have a strange problem with an enterprise installation of QS (sep 18) - when a user logs in the first time, the users is not provided an access pass eventhough he/she should according to the rule.

If we then close the browser and open it again, the access pass is provided as it should.

Any settings to verify or suggestions on how to fix this?

[Daniele_Purrone]

Hi Adam,

is the issue happening every day for each user, or just at the very first login?
Are you using tokens or Professional/Analyzer users?

What's the exact error message, and what do the logs say?

[Anil_Babu_Samineni]

Could be they are SSO, I mean same Company?

[adam_groenbeck]

Hi Daniele,

Thanks for the reply. We have only seen it on the very first login. We are using the pro/analyzer setup and it is the standard "You cannot access qlik sense because you have no access pass".

I have attached the log information where you can see the first login and second login.

Thanks

[Mauritz_SA]

Hi Adam

I think the problem is that the access pass is only issued to the user when the user opens the app/hub. In other words, when the user gets sent to the hub, the ticket that is issued is issued for a user who does not have an access pass yet. Even though the rule is set up to assign the pass, the session that is connected to the ticket does not have an access pass (the access pass gets assigned in this session though). When you close the browser and launch again, your cache is cleared and a new authentication ticket is created and in this ticket the user does have a pass (assigned by the rule when the user tried to open the hub the previous time). 

Regards,

Mauritz

[adam_groenbeck]

Hmm, but is there a way to fix it?

[Mauritz_SA]

Very good question. We have a similar setup and we will be rolling it out next week. After reading your post I realised that we are going to have the same problem. Maybe some of the Qlik Gurus will reply, but I don't think there will be an easy solution. You will see that the users only get assigned a pass in the QMC when they try to open the hub even though they already meet the criteria set up in your access rules.

[Daniele_Purrone · Accepted solution]

Yes, this is a current limitation. Starting in the April 2018 release, the license check occurs when the user accesses the Hub. If an Analyzer pass is applied after a user has established a QPS session, the user will get the message: “You cannot access Qlik Sense because you have no access pass.” User would have to log in again.

Starting with November 2018 it should be enough to just reload the page, not having to log-in again.