Qlik Community

Qlik Sense Deployment & Management

Discussion board where members learn more about Qlik Sense Installation, Deployment and Management.

Announcements
BI & Data Trends 2021. Discover the top 10 trends emerging in today. Join us on Dec. 8th REGISTER
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Not applicable

Qlik Sense SSO with Windows Authentication

Dear Experts

We are having below requirements for our Qlik implementation:

1. "End-user type of access" has to be chalked out for the AD users to login into Qlik Sense application so that they can create apps and visualizations.

2. Windows authentication is required to be setup along with Single Sign-On. If the user is logged-in with AD account in his laptop then he must be able to login automatically into Qlik Sense without entering the user ID / Password.

3. Issue is: The user is asked to enter the credentials even if the Qlik is configured with LDAP as UME source along with "Windows" as authentication type.

Please provide your suggestions on how to achieve this. Any related info is much appreciated. Attaching a pictorial representation.

Thanks & Regards

Hardeep

4 Replies
Highlighted
Partner
Partner

1. You will need to create User Directory connection for Active Directory assign Security Roles

2.  Refer https://help.qlik.com/en-US/sense/3.1/Subsystems/ManagementConsole/Content/SAML-authentication.htm for Single Sign on

3. Single Sign on will solve issue of asking credentials again and again.

I hope it is helpful.

Highlighted
Specialist II
Specialist II

Is it domain user or local system user ?

Highlighted
Not applicable

Hi Lakshmikandh

It is domain user and user connection is setup as LDAP in QMC. The Qlik Servers are also joined to the same domain.

Regards

Hardeep

Highlighted
Not applicable

Hi Shraddha

Thanks for the info. My comments below:

1. LDAP based user directory connection already enabled and the domain users are able to login but need to enter the credentials even if they are logged into the laptop via same domain user ID.

2. I understand the SAML based authentication approach. Is it possible not to go via SAML, instead make use of Web Server (IIS & QPS) to configure SSO ?

Regards

Hardeep