An identity provider (IdP) manages identity information for users and provides authentication services. The identity provider enables single sign-on (SSO) so that you can access other websites, without having to log in repeatedly. In contrast to on-premise technologies, such as Active Directory and LDAP, identity providers also offer a consistent and governed experience when accessing cloud services, eliminating the need to create accounts for each new service.
In Qlik Sense Enterprise SaaS, or in a multi-cloud deployment, an IdP delivers the following:
- Secure authentication of a user and a common identity (user ID and groups) passed between all deployments.
- Common user identity to assign a license to (to avoid double use).
- Common user ID and attributes, such as groups, to use when applying access control to content.
Qlik Sense Enterprise SaaS integrates with an IdP using the OpenID Connect (OIDC) standard. This is a standard that allows both interactive login, where a user logs in via a browser, and automated login, using APIs via a software product.
Qlik Sense Enterprise on Windows currently does not support OIDC, but supports SAML, or any method that allows a consistent user identity to the one provided by the IdP.