Users of a different Active Directory, but with membership to a group in the same Domain as the QlikSense server, are not synced

[Sonja_Bauernfeind]

Scenario:

• The Qlik Sense Server is located in Domain A, and includes a group by the name of GroupA_1.
• Domain B has a full trust relationship with Domain A.
• UserB_1, a member of Domain B, is added to the Active Directory GroupA_1 of Domain A
• An Active Directory (AD) User Directory Connector is set up which connects to Domain A, and is meant to sync users from GroupA_1
• UserB_1 is not being retrieved/listed after conclusion of a  sync task  in Qlik Sense.

 Environment:

• Qlik Sense Enterprise on Windows , all versions

 

Resolution:

This is working as designed. Users belonging to a different domain than where the group is a member of cannot be retrieved using an Active Directory (AD) User Directory Connector.

This is possible with a Advanced LDAP User Directory Connector. See Sync Active Directory users from multiple domains with Advanced LDAP - Qlik Sense Enterprise on Wind...

Workaround:

Two separate AD User Directory Connectors will need to be set up to be able to pull in the whole user base.

Related Content:

•  Users belonging to a group from another domain cannot access resources