Qlik Community

Ask a Question

QlikView Administration

Discussion Board for collaboration on QlikView Management.

Announcements
Join this live chat April 6, 10AM EST - QlikView to Qlik Sense REGISTER
cancel
Showing results for 
Search instead for 
Did you mean: 
simospa
Partner
Partner

Shibboleth And QV Server EE

Hi,

I need to know if Shibboleth can be used as SSO and Third Part Security System with QlikView Server Enterprise Edition.

Anyone has experience about it?

Thanks a lot

S.

1 Solution

Accepted Solutions
erikadvectas
Partner
Partner

Hi Simone,

Yes, this can be done. Shibboleth is an open source project that is a bit more complex and more extensible but otherwise works in the same way as SiteMinder. You configure it as a filter in front of the web application and then the user coming in to the web application has to authenticate with Shibboleth first, then Shibboleth passes his credentials to the web application in the form both a SAML statement and other attributes in HTTP Headers. So using it can be as simple as choosing to use the HTTP Header for authentication in the QEMC and then getting your customer to configure the Shibboleth filter in front.

In essence, Shibboleth can handle the SAML requests and can then set the user identity in the HTTP header, which in turn is configurable in QlikView.

There are a few different ways of using it, so it depends on how it is implemented. It does not appear to integrate very well with IIS though, sometimes it is even easier to use Apache as a reverse proxy in front of it.

Let me know if this helps.

Regards,

Erik

View solution in original post

4 Replies
erikadvectas
Partner
Partner

Hi Simone,

Yes, this can be done. Shibboleth is an open source project that is a bit more complex and more extensible but otherwise works in the same way as SiteMinder. You configure it as a filter in front of the web application and then the user coming in to the web application has to authenticate with Shibboleth first, then Shibboleth passes his credentials to the web application in the form both a SAML statement and other attributes in HTTP Headers. So using it can be as simple as choosing to use the HTTP Header for authentication in the QEMC and then getting your customer to configure the Shibboleth filter in front.

In essence, Shibboleth can handle the SAML requests and can then set the user identity in the HTTP header, which in turn is configurable in QlikView.

There are a few different ways of using it, so it depends on how it is implemented. It does not appear to integrate very well with IIS though, sometimes it is even easier to use Apache as a reverse proxy in front of it.

Let me know if this helps.

Regards,

Erik

View solution in original post

simospa
Partner
Partner
Author

Thanks a lot!

S.

bujnakbranislav
Partner
Partner

Hi Eric:

Would you have some documentation on Shibboleth SAML SSO integration with Qlik Sense?

Thanks for any information that you can provide.

Branislav

erikadvectas
Partner
Partner

Unfortunately not, this was with QlikView. They way of authentication is not identical, but very similar in many aspects. I suggest you explore the SSO options with Qlik Sense on the help site.

Cheers.