Identity providers in Qlik Cloud

An identity provider (IdP) is a service that manages user authentication and login information. In Qlik Cloud, you can use the default Qlik Account or integrate a custom IdP that supports OpenID Connect or SAML standards. This integration ensures secure authentication and consistent user identity across cloud deployments.

Default identity provider: Qlik Account

The default IdP for Qlik Cloud is Qlik Account (not available with Qlik Cloud Government).

The key features include:

• Service account owner: The email address associated with the service account (the one that received the welcome email during tenant creation), is automatically added as a member of the tenant. For tenants created through My Qlik, the service account owner can log in immediately after the tenant is created.

• Authentication domains: Qlik Account provides authentication for qlik.com and qlikcloud.com.

Using corporate identity providers

You can integrate your own IdP with Qlik Cloud for authentication. Each Qlik Cloud tenant supports only one interactive IdP. Supported providers include:

• Microsoft Entra ID (formerly Azure AD)

• Okta

• Auth0

• Salesforce

• Google Identity (generic integration)

• OneLogin (generic integration)

When you switch to a corporate IdP, the Qlik Account login flow is replaced by the authentication process of your chosen provider.

Benefits of using an IdP

Integrating an IdP into your Qlik Cloud deployment offers several benefits:

• Secure Authentication: Ensures that users' identities are verified securely.

• Unified user identity: Maintains consistent user IDs and group data across all deployments,

• Simplified licensing: Ensures one identity per user, preventing licensing conflicts and ensures that users are assigned the correct license.

• Access control: Enables consistent application of access controls based on user attributes, such as ID and group memberships.

• Single sign-on (SSO): Allows users to access multiple services with a single login, eliminating the need for separate credentials for each service.

• Cloud-based IdPs: Simplify authentication across online services. For organizations using Active Directory (AD), IdPs can integrate AD-stored accounts into cloud environments.

Supported IdP standards

Qlik Cloud supports integration with IdPs using OpenID Connect (OIDC) and SAML standards. These integrations support:

• Interactive login: Users log in via a web browser.

• Automated login: API-based authentication for software products.

Adding users to the tenant

Your subscription determines how users are added to your tenant:

• Identity provider integration: If your license includes IdP integration, the Identity provider pane will be available in the Administration activity center.

• Email invites: If IdP integration is not enabled, you can invite users manually through the Users section in the Administration activity center.

In a multi-cloud setup, Qlik Sense Enterprise on Windows integrates with an IdP using the SAML standard or any other method that provides the IdP with a consistent user identity.

IdPs in this scenario must support both OIDC and SAML standards.

For additional information on how to set up a multi-cloud deployment, see Distributing apps to Qlik Cloud.