How to implements SSO(single sign on) in detail?

[uacg0009]

Hi guys,

I have used Qlikview around 2 years and this is my first time to do the SSO, but I don't know how to do that step by step.

Because I'm not familiar with the network skill so even I have already looked through many old threads in community and many pdfs and many documents about SSO and security, I also don't know how to start work with that and I think I don't need any threads link about SSO.

Well what I want is : I have a company portal, and when user login in the company portal, then they can click a button to jump into access point or specifc document(qvw).

What I know :

The server of company portal and accesspoint are in one server cluster.

We are using the Windows Server2012

We are using the Qlikview11.20 CR12

We are using the javascript to create our company portal

We have Qlikview Server Licesen, No Publisher.

We store our user information(username and password) in database.

Any other information if you need, please tell me.

After I read these pdfs, I think I need to use WebTicket to implement the SSO.

And I think in our company portal we need to add some scripts about the WebTicket so the portal can send the information to qlikview server, becuase we have a getwebticket.aspx.

And I just want to know what I need to do in Qlikview side, for example in QMC, in Server or in specific document, what I need to do?

I just want to know the detail step, because in these pdfs, they just told me how the WebTicked works or an example for WebTicket.

But I don't know what I need to do in Qlikview side?

So could you please tell me?

Thank you so much!

Aiolos Zhao

04.26 updates:

1.Now I'm using the IIS.

2.And when I click the button, returns invalid call().

I have set the authentication for Qlikview Server on IIS to Windows disable, anonymous enable.

for GetWebticket.aspx to Windows enable, anonymous disable.(only for this file)

And I also saw someone said the user call the ticket needs to be in QV Administrator and Qlikview Management API, but I can't find the Qlikview Management API.

is there someone can solve this problem?

[#2]

hi ,

Check this thread

SSO in Qlikview

[Chanty4u]

chk dis

Re: RE:Single authentication

[uacg0009]

Thanks for reply, but I have already saw this threads before, and also checked the document, it didn't show me how to do the SSO step by step. Do you know where I need to start from?

[uacg0009]

Thank you for your reply, I have checked this thread before and also the example, but it didn't show me how to do the SSO in Qlikview side, could you please tell me how to do that in Qlikview side?

[uacg0009]

Anyone can help with that?

[maksim_senin]

Hi Aiolos,

I don't know what your infrastructure is, do you use AD (Active Directory)?

In my case use of AD and NTLM authentication works well. As for other types of authentiocation, unfortunatelly I don't have an experience.

Best regards,

Maxim

[uacg0009]

Hi Senin,

Thanks for reply, actually now we are using the Custom Directory and I think I need to change that.

So I just want to know if you use NTLM authentication, do you need user name and password when you log in your company portal?

Aiolos Zhao

[maksim_senin]

Hi Aiolos,

In general case none of our users should enter login&password once he/she logged in to Windows. This is configured via domain policies. Of course there are exceptions from the rules but almost all of them are configurable.

Bets regards,

Maxim

[uacg0009]

Hi Maxim,

In my company, users need to input the username and password to log in the portal, but is there any differences or big differences between using NTLM and not when we use WebTicket to implement the SSO?

Aiolos Zhao