User directory connectors

The user directory connector (UDC) connects to a configured directory service to retrieve users. The UDCs supplied with the Qlik Sense installation are Generic and Advanced LDAP, Active Directory, ApacheDS, ODBC, Access (via ODBC), Excel (via ODBC), SQL (via ODBC), and Teradata (via ODBC).

No UDC is required for a local user to log on to Qlik Sense. However, for the local user to be able to access apps, you need to allocate access. With a user-based license, you can use professional or analyzer access rules. With a token-based license, you can use user or login access rules to allocate access. Alternatively, a local user can first log on to be recognized as a user, and then be allocated tokens.

Qlik Sense supports only Microsoft directory servers to be added as User Directory Connectors of type Active directory, Generic LDAP and Advanced LDAP.

User attribute names and values must comply with the syntax definition of the LDAP standard when used in security rules. This means that the following constraints apply:
• Attribute name: Can only contain a-z, A-Z, 0-9, and "-". Must start with a-z or A-Z.
• Attribute value: Any UTF-8 string.

If you use a PostgreSQL database, and have table names with capital letters, or special characters, such as ".", you must enclose the table names with quotation marks. Without quotation marks, validation of the table names will result in an error. Examples of table names: "table.Name", public."Table" (or "Table"), testschema."Table".

If you sync users and a user attribute has the same name as a column in the user table, that column will be unavailable in the column selector and table rendering may be erratic.

The User directory connectors overview lists all the available user directory connectors. The following table presents the available fields and buttons. By default, only some of the fields are displayed. You can use the column selector ( Table ) to add fields.

User directory connectors
Field/Button	Description
Name	The name of the user directory connector configuration, entered from the QMC.
User directory	The user directory name depends on the user directory configuration: Entered manually for ODBC and LDAP. Generated from the connector's properties for Active Directory. Information note The value of the User directory must be unique; otherwise the connector cannot be configured. The User directory value is used when creating a security rule to a user directory.
Type	Generic LDAP, Advanced LDAP, Microsoft Active Directory, ApacheDS, ODBC, Access (via ODBC), Excel (via ODBC), or SQL (via ODBC).
Configured	Status values: Yes or No. To be configured, the user directory name must be unique and not blank.
Operational	Status values: Yes or No. Operational means that the configuration of the connector properties enables communication with the user directory. Information noteDifferent connectors require different properties. Check the UserManagement_Repository log at this location: %ProgramData%\Qlik\Sense\Log\Repository\Trace.
Status	The status of the user directory connector: Idle: When no synchronization is performed. External fetch: The first phase of the synchronization, when fetching the data from the directory service. Database store: The second phase of the synchronization, when storing the data in the QRS. Information note If the status is displayed as Idle and Last started is more recent than Last finished the synchronization has failed.
Last started sync	The date and time when synchronization of user data last started. The synchronization is either triggered by a task or started manually from the user directory connectors overview. Information noteLast started sync and Last successfully finished sync are updated when a user synchronization is triggered, which happens, for example, when a user who belongs to the UDC or the same domain accesses the hub, the dev-hub, or the QMC.
Last successfully finished sync	The date and time when synchronization of user data last finished successfully. Information noteLast started sync and Last successfully finished sync are updated when a user synchronization is triggered, which happens, for example, when a user who belongs to the UDC or the same domain accesses the hub, the dev-hub, or the QMC.
Tags	The names of the connected tags.
Sync user data for existing users	Status values: Yes or No. Yes is displayed when this option is selected. When selected, only the existing users are synchronized. An existing user is a user who has logged in to Qlik Sense and/or been previously synchronized from the configured directory service. When not selected, all the users, defined by the properties for the UDC, are synchronized from the configured directory service. You can create a filter to Active Directory, ApacheDS, Generic LDAP, or Advanced LDAP, if you only want to synchronize a selection of users. Information noteWe recommend that you keep this option selected if you have a user directory with a large number of users and user attributes. Information noteThe user attributes are only synced when a user logs in to the hub. Even if you delete the user in the QMC, the active session is still valid for the user that has been deleted. If the hub is only refreshed, the user is added to the database, but without any attributes.
ID	The ID of the user directory connector.
Created	The date and time when the user directory was created.
Last modified	The date and time when the user directory connector was last modified.
Modified by	The user ID of the user who modified the user directory connector.
	Sort the list ascending or descending. Some columns do not support sorting.
	Type a string to filter on, or, when available, select a predefined value. All rows that match your filter criteria are displayed. You can filter on multiple columns simultaneously to narrow your search. If a filter is applied to a column, is displayed. To remove your criteria, click Actions in the table header bar and select Clear filters and search. You can combine filtering with searching. Searching and filtering in the QMC
Actions	Options for clearing filter and search, selecting and deselecting all rows, and toggling wrapping. Information noteThe option Select all rows is applied to the rows that are currently displayed. Any rows that have been filtered out before selecting all rows are disregarded, even if they were selected. The option Deselect all rows is applied to all rows, including those that were filtered out.
	Column selector: Select which columns to display in the overview. Click to reset to the default columns.
	Search – both basic and more advanced searches. Searching and filtering in the QMC
	Refresh the page. Information noteIf you have added a new user directory connector type you need to press F5 to refresh the list of available user directory connectors.
Edit	Edit the selected user directory connector.
Delete	Delete the selected user directory connector.
Sync	Synchronize the user data via the selected user directory connectors.
Create new	Create a new user directory connector.
Show more	The overview shows a set number of items, by default. To show more items, scroll to the end of the list and click Show more. Searching, sorting, and filtering of items is always done on the full database list of items, not only the items that are displayed.

Double-click an item in the overview to open the resource's edit page. For multiple selections, hold down Ctrl while clicking the items, or drag over the items.

Learn more

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!

Leave your feedback here