Contents

Qlik Sense SAML Single Sign-On (SSO) | Login into Qlik Sense using WordPress

Login using WordPress Users (WP as SAML IDP) Plugin enables Single Sign-On (SSO) login into Qlik Sense using WordPress Login credentials. In this guide we will set up Qlik Sense SSO login for WordPress (WP) users by configuring Qlik Sense as Service Provider (SP) and WordPress as the Identity Provider (IDP).

Pre-requisites: Download And Installation

To integrate the WordPress site as an Identity Provider, you will need to install the miniOrange Login using WordPress Users ( WP as SAML IDP ) plugin:

By miniOrange

(42)

Single Sign-On (SSO) login with WordPress Users into any Service Provider like Tableau, Zoho, Zoom, Moodle, Canvas LMS, Absorb LMS, TalentLMS, etc.

Get this plugin

Follow below steps to setup Qlik Sense WordPress Single Sign-On (SSO) login

1. Setup Qlik Sense as SP (Service Provider)

Go to the WordPress IDP plugin, navigate to the IDP Metadata tab.
Here, you can find the Identity Provider Metadata URL /XML Metadata or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate for SP configuration.
Download the Metadata file and keep it handy as you will need it later to configure the Service Provider.

Qlik Sense WP Single Sign-On (SSO) | Qlik Sense WordPress SSO Login

In a new browser window, login to your Qlik Sense portal as Admin.
In the QMC, under the CONFIGURE SYSTEM, select the Virtual proxies.

Qlik Sense WP Single Sign-On (SSO) | QMC

Click on Create new to create a new virtual proxy.

Qlik Sense WP Single Sign-On (SSO) | New Virtual Proxy

In the Edit virtual proxy page, on the right hand side under the Properties tab, make sure that Identification, Authentication, Load balancing and Advanced are checked.

Qlik Sense WP Single Sign-On (SSO) | Properties

Under the Identification section, enter the below information into the corresponding fields.

Description	miniOrange
Prefix	miniOrange
Session inactivity timeout (minutes)	Default value
Session cookie header name	X-Qlik-Session-miniOrange

Under the Authentication section, enter the below information into the corresponding fields.

Authentication method	SAML
SAML single logout	checked
SAML host URI	Enter the URL that users will use to access Qlik Sense (name of your server)
SAML Entity ID	Copy and paste the IDP-EntityID / Issuer from the plugin
SAML IdP Metadata	Upload the IDP Metadata file that you have downloaded previously
SAML attribute for user ID	NameID
SAML attribute for user directory	[miniOrange]
SAML Signing algorithm	SHA-256

Qlik Sense WP Single Sign-On (SSO) | Authentication - Identification

Under the LOAD BALANCING section, click on Add new server node.

Qlik Sense WP Single Sign-On (SSO) | Load Balancing

Select the engine nodes to which this virtual proxy will load balanced connections.

Qlik Sense WP Single Sign-On (SSO) | Engine Nodes

In the Host white list click on Add new value
Enter the same SAML host URI as above.
Click apply then click ok and restart the services.

Qlik Sense WP Single Sign-On (SSO) | Host white list

In the Associated items, click on Proxies then on Link button and link the virtual proxy to the proxy that will use this configuration.

Qlik Sense WP Single Sign-On (SSO) | Proxies

Restart the service and navigate to the Virtual proxies overview page.
Select the miniOrange configuration that you created and click on Download SP metadata.
Keep this metadata file handy as you will need this file while configuring WordPress SAML IDP plugin.

You have successfully configured Qlik Sense as Service Provider.

2. Configure WordPress (WP) as IdP (Identity Provider) for SSO login into Qlik Sense

In the WordPress IDP plugin, navigate to the Service Providers tab and click on Upload SP Metadata button on the top right hand corner.

Enter your Service Provider name.
You can either Upload SP Metadata file OR can Enter Metadata URL.
Click on Fetch Metadata button.

3. Attribute Mapping (optional)

In the Edit virtual proxy under the SAML attribute mapping click on Add new attribute.
Clear the selection of Mandatory checkbox.

Qlik Sense WP Single Sign-On (SSO) | Attribute Mapping

4. Testing SSO

In an incognito window, browse to the Qlik Sense server URL.
You will be redirected to your WordPress login page. Enter your user credentials.
On successful authentication, you will be logged in to the Qlik Sense Hub.

In this Guide, you have successfully integrated Qlik Sense SSO via the Login using WordPress Users (WP as SAML IDP) plugin by configuring Qlik Sense as SP and WordPress as IDP. This solution ensures that you are ready to roll out secure Single Sign-On (SSO) access with SAML 2.0 Authentication into Qlik Sense using WordPress login credentials.