Qlik Community

QlikView Deployment

Discussion Board for collaboration related to QlikView Deployment.

Announcements
Register for Events and Webinars directly from Qlik Community: http://bit.ly/2Vpnenx
Highlighted
Not applicable

Can you combine Active Directory and Custom Directory authentication?

We currently have DSC hooked up to our Active Directory, and AD users can log in.

We would like to create additional users that can log in and access documents. The Custom Directory feature under DSC seems perfect for this. We can create users and groups, and assign them to workbooks using DMS authorization.

However, no combination of web server settings seems to allow both AD users and custom users to log in. We can set logins to be by NTLM (for AD) or to Custom User, but not both.

Is there *any* way to make this work? Or any alternate way to allow both AD and non-AD users to use the system? Thanks in advance!

Labels (1)
1 Solution

Accepted Solutions
Highlighted
Employee
Employee

Re: Can you combine Active Directory and Custom Directory authentication?

Hi Steven,

ASHFAQ is right, by default you have to choose between one or the other.

There is a way though. You should know this way is not supported. You can contact your local Qlik office and they will provide expert consultant that can build and support this for you.

The way is to customize Authenticate.aspx. By doing so, you can build whatever authentication method you want, for instance : try on AD, if it fails try on Custom. You will need to add two DSC providers (one for each) to resolve the groups of both directories.

This will most likely need that you switch to IIS if it's not already done.

Loic

View solution in original post

2 Replies
Highlighted

Re: Can you combine Active Directory and Custom Directory authentication?

Hi,

You can use only one Authorization mechanism at a time.

If you use NTLM you can't use Custom directory or DMS.

I suggest to create some user in your active directory as Custom directory is not suited for bigger implementation

Regards

ASHFAQ

Highlighted
Employee
Employee

Re: Can you combine Active Directory and Custom Directory authentication?

Hi Steven,

ASHFAQ is right, by default you have to choose between one or the other.

There is a way though. You should know this way is not supported. You can contact your local Qlik office and they will provide expert consultant that can build and support this for you.

The way is to customize Authenticate.aspx. By doing so, you can build whatever authentication method you want, for instance : try on AD, if it fails try on Custom. You will need to add two DSC providers (one for each) to resolve the groups of both directories.

This will most likely need that you switch to IIS if it's not already done.

Loic

View solution in original post