401 Errors when rendering extension objects in mashup

[frankpacker]

I've got a mashup using Qlik's qdt components deployed on an IIS machine.
I've configured a virtual proxy with standard ticket authentication using AD user accounts and everything works ok with one exception: all Qlik objects render fine, no issues at all, but there are several extension objects being used that do not display, instead showing 'invalid extension object'. They are throwing 401 errors in the console as per below:

I've troubleshot the problem by changing the virtual proxy to allow anonymous users (see attached image), then logging in to Qlik via the virtual proxy and opening the mashup from the same browser session. This works and the extension objects render, so there is some issue with internal communication that's causing the extension objects to be unauthorised and throw the 401.

Does anyone know how to solve this?

Virtual proxy with 'Allow Anonymous' set - this solves the issue at hand, but is obviously not the right solution.

[Damien_Villaret]

Hello @frankpacker 

It would seem that the session cookie is not passed when loading those files.

Did you try to change the SameSite attribute for https to "None"  and see if that makes any difference ?
This is usually required when using Qlik Sense in embedded content.

https://community.qlik.com/t5/Support-Knowledge-Base/Qlik-Sense-for-Windows-All-you-need-to-know-to-...

[frankpacker]

Thanks for the reply, @Damien_Villaret 

Making that alteration has not produced any change in behaviour. Both the IIS and Qlik machines are on the same domain.