Creating a user directory connector

You can create a new User Directory Connector (UDC). Do the following:

1. Select User directory connectors on the QMC start page or from the StartS drop-down menu to display the overview.

2. Click PCreate new in the action bar.

   The dialog with available user directory connector types is displayed.

3. Select the type for the new user directory connector and also the source. The following types are available:

   • Generic LDAP
   • Active Directory
   • Apache directory search
   • Local network
   • ODBC
   • Access (through ODBC)
   • Excel (through ODBC)
   • SQL (through ODBC)

4. Edit the properties.

   Tip note You can display or hide property groups using the panel to the far right.
   Identification

   The Identification property group contains the basic UDC properties in the Qlik Sense system.

   All fields are mandatory and must not be empty.

   Property	Description
   Name	The name of the UDC configuration defined from the QMC.
   Type	The UDC type.

   User sync settings

   The User sync settings property group contains the user sync properties for the user directory connector.

   Property	Description	Default value
   Fetch user data on first access, then keep in sync	When selected, only the existing users are synchronized. An existing user is a user who has logged in to Qlik Sense and/or been previously synchronized from the configured directory service. When not selected, all the users, defined by the properties for the UDC, are synchronized from the configured directory service. You can create a filter to Active Directory or Generic LDAP if you only want to synchronize a selection of users.	Selected

   Tip noteDecide how the synchronization is performed by selecting or clearing Fetch user data on first access, then keep in sync, in the property group User sync settings.
   Connection (Generic LDAP and Active Directory)

   The Connection property group contains the LDAP connection properties in the Qlik Sense system.

   Property	Description	Default value
   User directory name Information noteNot entered manually for Active Directory.	Must be unique, otherwise the connector will not be configured. The name of the UDC instance (to be compared to the domain name of an Active Directory). Together with the user's account name, this name makes a user unique.
   Path	The URI used to connect to the AD domain. To support SSL, specify the protocol as LDAPS instead.	ldap://company.domain.com
   User name	The optional user ID used to connect to the AD server. If this is empty, the user running the Qlik Sense repository is used to log on to the AD server.	-
   Password	The optional password for the user.	-

   Information noteWhen a user creates an Active Directory connector that uses LDAPS, the connector will only work when that user (the creator of the UDC) is logged on to the machine and running the Qlik Sense services.
   To sync users using LDAPS, you must provide user name and password.
   Connection (Local network)

   The Connection property group contains the Local users connection properties in the Qlik Sense system.

   Property	Description	Default value
   Sync all domain users	If not selected, only the users on your local computer will be synchronized. If selected, all users in the domain that your computer belongs to will be synchronized.	Not selected

   Connection (ODBC) and (via ODBC)

   The Connection property group contains the ODBC connection properties in the Qlik Sense system.

   Property	Description	Default value
   User directory name	The name of the user directory. Must be unique, otherwise the connector will not be configured.	-
   Users table name	The name of the table containing the users.	-
   Attributes table name	The name of the table containing the attributes of the users.	-
   Visible connection string	The visible part of the connection string that is used to connect to the data source. Information noteThe two connection strings are concatenated into a single connection string when making the connection to the database.	-
   Encrypted connection string	The encrypted part of the connection string that is used to connect to the data source. Typically contains user name and password. Information noteThe two connection strings are concatenated into a single connection string when making the connection to the database.	-
   Synchronization timeout (seconds)	The timeout for reading data from the data source.	240

   Advanced (Generic LDAP and Active Directory)

   The Advanced property group contains the advanced LDAP connector properties in the Qlik Sense system.

   Property	Description	Default value
   Additional LDAP filter	Used as the LDAP query to retrieve the users in the AD.	-
   Synchronization timeout (seconds)	The timeout for reading data from the data source.	240
   Page size of search	Determines the number of posts retrieved when reading data from the data source. Tip note If the user synchronization is unsuccessful, try setting the value to no value.	2000

   Tip noteUse the Additional LDAP filter in the property group Advanced to apply a filter that retrieves only a selection of the users.
   Directory entry attributes (Generic LDAP)

   The Directory entry attributes property group contains the directory entry attributes for the LDAP connector.

   Information noteThe directory entry attributes are case-sensitive.

   Property	Description	Default value
   Type	The name of the attributes that identifies the type of directory entry (only users and groups are used by the LDAP UDC).	objectClass
   User identification	The attribute value of the directory entry that identifies a user.	inetOrgPerson
   Group identification	The attribute value of the directory entry that identifies a group.	group
   Account name	The unique user name (within the UDC) that the user uses to log in.	sAMAccountName
   Email	The name of the attributes that holds the emails of a directory entry (user).	mail
   Display name	The full name of either a user or a group directory entry.	name
   Group membership	The name of the attributes that indicates direct groups that a directory entry is a member of. Indirect group membership is resolved during the user synchronization. This setting or the one below, Members of directory entry, is allowed to be empty, which means that the group membership is resolved using only one of the two settings.	memberOf
   Members of directory entry	The name of the attributes that holds a reference to the direct members of this directory entry. See also the Group membership setting, above.	member

   Tags

   The Tags property group contains the available QMC tags in the Qlik Sense system.

   Property	Description
   Tags	Tip noteIf no QMC tags are available, this property group is empty. Connected QMC tags are displayed under the text box.

   Click Apply to save your changes. If a mandatory field is empty, Apply is disabled.

5. Click Apply in the action bar to create and save the user directory connector.

   Successfully added is displayed at the bottom of the page.

You have now created a new user directory connector and a new User synchronization task is created by default for the new user directory connector.

The User Directory Connector (UDC) is not operational is displayed if the configuration of the connector properties does not enable communication with the user directory. Check the UserManagement_Repository log at this location: %ProgramData%\Qlik\Sense\Log\Repository.

The User Directory Connector (UDC) is not configured is displayed if the User directory name is already used or if the field is empty.