Additional Login Dialog Appears for AJAX client with IIS used as WebServer

[Sonja_Bauernfeind]

Using Microsoft IIS as the web server in a QlikView Server implementation, Qlik generally advises configuring the QlikView virtual directories to only allow Windows Authentication.

In the case of an implementation where users are accessing things from outside the server domain or the internal network, users may receive an additional login prompt when opening Documents from the AccessPoint or when sending to Excel or using a Print action in the Ajax client.

Environment

• QlikView with IIS, any

Cause

Having the virtual directories set to only Windows Authentication in IIS may result in unexpected authentication requests, so it is best practice to set Windows Authentication on the pages that require authenticated access instead of configuring all pages to be secured.

Resolution

Modify the security on all QlikView Virtual Directories in IIS to allow Anonymous and only lock down the necessary files with Windows Authentication. 

Keep Windows authentication only (no anonymous authentication) on:

• Authenticate.aspx
• GetWebTicket.aspx
• GetTicket.aspx

They can be found in the QvAjaxZfc virtual directory. 

Note: By default, the virtual directories will inherit the properties of the web site.