
Digital Support
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to Enable User Groups in Qlik Sense Enterprise SaaS
Last Update:
Jan 25, 2024 9:04:40 AM
Updated By:
Created date:
Aug 14, 2020 9:06:30 AM
This video demonstrates how to enable automatic user group creation when using Auth0 and Okta Identity Providers in Qlik Sense Enterprise SaaS.
This customization is provided as is. Qlik Support cannot provide continued support of the solution. For assistance, reach out to our Professional Services or engage in our active Integrations forum.
Please note: in order to make sure that Windows AD groups are sent from Okta to Qlik Cloud, make sure to:
- modify the filter in the "Groups claim expression" to add the AD groups
- allow groups to be read in OKTA API scopes
Please, refer to Okta support for instructions on how to do that.
Related Content:
10,156 Views
Comments

Partner - Contributor III
2024-01-22
10:21 AM
- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Very helpful. I'm using Auth0. I used Roles to store group info.
groups box = /https:~1~1qlik.com~1groups
Advanced options claims = email openid profile https://qlik.com/groups
I created an API with the permissions to read groups. (Not 100% sure I needed to do that)
And I created a Flow in the Post Login section (Actions > Flows > Login) that added groups to the response.
/**
* @param {Event} event - Details about the user and the context in which they are logging in.
* @param {PostLoginAPI} api - Interface whose methods can be used to change the behavior of the login.
*/
exports.onExecutePostLogin = async (event, api) => {
if (event.authorization) {
api.idToken.setCustomClaim(`${namespace}/groups`, event.authorization.roles);
api.accessToken.setCustomClaim(`${namespace}/groups`, event.authorization.roles);
}
}