Custom group on top of SSO

[punitpopli]

Hi Team,

We have SSO implemented (using LDAP) for one of our client and they used "All Authenticated users" in QMC for access rights as they use section access to control the application to be view on access point.

Few days before a incident happen when one of the user who is not at all part of the section access script was able to view the application (thumbnail) on access point.

Can we use custom group on top of SSO to make sure we also have security maintained at QMC level rather then trusting solely on section access script.

Have anyone implemented such kind of scenario or is their better approach to avoid such scenarios

thanks in advance

-Punit

[marcus_sommer]

The using of the DMS authentication with custom user/usergroups is only recommended if you haven't any other possibilities to handle your users. In your case you have a LDAP repository which AFAIK could be used with NT and therefore no need for custom user/usergroup.

- Marcus

[punitpopli]

Hi pcammaert‌,

Thanks for your reply.

I have came across QlikView help about this functionality and found that even though we enable this functionality the user will able to view the thumbnail of the app, though the user will not be able to open the app based on section access

Below is the link for reference.

Document Properties: Server

Thanks,

Punit