Can you combine Active Directory and Custom Directory authentication?

[#1]

We currently have DSC hooked up to our Active Directory, and AD users can log in.

We would like to create additional users that can log in and access documents. The Custom Directory feature under DSC seems perfect for this. We can create users and groups, and assign them to workbooks using DMS authorization.

However, no combination of web server settings seems to allow both AD users and custom users to log in. We can set logins to be by NTLM (for AD) or to Custom User, but not both.

Is there *any* way to make this work? Or any alternate way to allow both AD and non-AD users to use the system? Thanks in advance!

[ashfaq_haseeb]

Hi,

You can use only one Authorization mechanism at a time.

If you use NTLM you can't use Custom directory or DMS.

I suggest to create some user in your active directory as Custom directory is not suited for bigger implementation

Regards

ASHFAQ

[lft · Accepted solution]

Hi Steven,

ASHFAQ is right, by default you have to choose between one or the other.

There is a way though. You should know this way is not supported. You can contact your local Qlik office and they will provide expert consultant that can build and support this for you.

The way is to customize Authenticate.aspx. By doing so, you can build whatever authentication method you want, for instance : try on AD, if it fails try on Custom. You will need to add two DSC providers (one for each) to resolve the groups of both directories.

This will most likely need that you switch to IIS if it's not already done.

Loic