You can use this article once and see if you can solve this. You have to use a cert and then you have to extract the private and public keys (open SSL could be an option) and then from you have to get the bearer token from JWT.IO by providing the header authentication (based on the user settings and attributes which you want to pass it in header). You have to create a separate VP in QLik sense with JWT authentication and then test that.
You have to open the website https://jwt.io and then payload should be this. You have to choose RSA256 as an algorithm and nothing should be changed under the "Header" section and along with this, you will have to extract the public and private key of that cert which you will have to paste it on the same website under those sections and then you have to copy the token and use it by adding "Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJLaXNob3JlIiwidXNlckRpcmVjdG9yeSI6InNnIn0.rSWaQaDifWamWXOH_rP8AhIZvpdo3U1o_NMauMhGbGDyp2E9p3OW_G1IPAdknVJrRKxNexrALnqdzaBj2KHj9jAmgnNQCRybanOx9PPfVXyIa0BcsOlnCiIIyJxRWdeh_XcBGIt8uTY9Yugie02ovAlte3cPSPHHBs8TRGHiJqU" like this.
Above is just an example for you.
Question:-in qlik sense if I am retrieving users from excel not from AD then in that case JWT is applicable
Ans:- You can try that based on the attributes which you using while bringing the users in Qliksense. I used attributes "userId" and userDirectory, however, you might be using uid or anything else so you can try and test with that and see if that makes a difference.
I have seen that file. You are passing lots of information under payload however you should test it with userID and user directory first and see if that works.
And second, i see that new virtual proxy you configured is not correct.
Fix these below under new virtual proxy for JWT
1. you used prefix as jwt then session cookie header name should be x-qlik-session-jwt.
2. JWT attribute for user id should be this "userId" and directory "userDirectory" not the one which you mentioned and the please test it only with userID and userDirectory and see if you can authenticate with JWT hearder to qlik sense hub and then add more payload option which can be sent in JWT authentication.