How to hide or scramble userid/password informatin in url?

[#1]

hi,

I have a webpage which want to visit qvwfiles by link url follows:http://servername/QvAjaxZfc/AccessPoint.aspx?open=&id=localhost%filename.qvw&client=Ajax?USERID=ADMI...

Now I don't want USERID PASSWORD shown in url. I don't want end users seen the information.

It is important to my project. I have tried many ways, but failed.

I look up the reference manual, in page 299~232(QVS v9.0) I find the article named "35.5 Using section access with QlikView AJAX
ZFC". I think may be I can use XUSERID XPASSWORD to solved my problem, could I? or some other way? I need details about this.

note: I run QVS in windows2008R264bit with QlikviewWebServer and IIS for my own webpage which has the link.....

[#2]

Hi,

Try using authentication based on Windows Active Directory . That way users are invisibly authenticated using Windows security, no passwords are asked or need to pe passed in URL

-Alex

www.snowflakejoins.com

[#3]

hi, If use windows authentication, could I have to create useraccount in windows os. But there are many users should be added manually.

Could you give me an example about your post? Thanks Alex:)

[#4]

hi, If use windows authentication, could I have to create useraccount in windows os. But there are many users should be added manually.

Could you give me an example about your post? Thanks Alex:)

[erichshiino]

I would go for the NT authentication too... but in another post you mentioned you were working wih .net.. is it the same case?

If it is you should take a look at tickets...

I think this is one of the best threads on the subjects (with references to other threads)

http://community.qlik.com/forums/t/29152.aspx

You would request a ticket (number) to the server. Then, you would use this ticket to generate the URL. I think that after some time this ticket wil expire, so you don't have to worry about showing this number but it's better to check with .net x qlikview experts

[#6]

I'm confused about this. I want to know: If I use ticket, I must run QVS in DMS mode. But in this mode, I must use windows user account and set user settings in QEMS for every users in one document. I'm really need your help.

[marcohadiyanto]

i haven't try to hide userid,

can't you use NT authentication?

i think its better..

[#8]

I want to know if I use NT authentication, should I create each user account in windows?

[erichshiino]

Yes, you have.

QlikView does not handle authentication itself. It only can authorize the users.

Windows will authenticate the users, QlikView will consult this information to let the user open access point, open files, etc. (I guess Directory services handles this)