User should not be allowed to login to Access point

[aj0031724]

Team,

One of my client requirements is as below:

We are not using "Allow dynamic CAL assingment" anymore .

We are expecting no other users except the ones that were assinged manually to clusters can log in to Access Point but currently  they can.

For example, A is not assinged any clusters but he can log in to Access point. In fact, he shouldn't be allowed to  log in.

Can we restrict  unassigned CAL users  to Access point through QMC settings?

Any other approach please suggest.

[Peter_Cammaert · Accepted solution]

I think you are confusing authentication with authorization (and license assignment).

A login dilaog appears whenever the resource you are trying to use (e.g. the AccessPoint web page) requires you to identify yourself. Once you have been identified and authorized to visit the AP web page (done mostly through AD), the AP landing page will be presented to you. If you go any further (e.g. by clicking a document thumbnail) QlikView authorization will become active (license check, document permissions) but access to the AP landing page itself is governed as an AD resource.

If you want the AccessPoint page to be unavailable to some users, either remove them from the AD permissions for that particular server, or switch to another Authentication mechanism.

Peter

[aj0031724]

Hi Peter,

Thanks for the quick response and sharing  useful information.

Will explain the same to the client.

Thanks again.