Possibel to use existing directory connection?
Opened this issue · 1 comments
Would it be possible to extend this application to read existing directory connections? I.e. if I have a windows AD directory connection, could I impersonate users from that connection? or is it just limited to those users defined in the provided excel repository.
Creating a secondary UDC which has the same DOMAIN as an existing UDC is dangerous. If you do not mirror the users across both then you risk locking yourself out of Sense.
Honestly to impersonate an AD user, I've found it easier to use a Header Virtual Proxy (see here) and Fiddler to inject the headers in the request to Qlik Sense.
In terms of adding users, it's as easy as going to C:\Program Files\Qlik\Sense\EAPowerTools\iportal\udc\excel\iportal_users.xlsx and adding in a new user + their attributes (the attributes as CaSe SeNsItIve so be careful there).
Given standard iPortal then the users will come in as IPORTAL\USERNAME but this can be changed in QMC > UDC > Edit iportal > Edit the User Directory Name. I'd highly recommend against giving this the value of your AD users, especially since setting up a Header Virtual Proxy is trivial compared to the headache of possibly locking you or all your users out of Sense.