Qlik NPrinting SAML Authentication with Okta

[Sonja_Bauernfeind]

When setting up Qlik NPrinting SAML Authentication with Okta you may encounter the following error:
 

<Error>
<Message>No HTTP resource was found that matches the request URI 'http://NPrintingServer:4996/login/saml/sso/login/saml/Okta'. </Message>
<MessageDetail>No route data was found for this request.</MessageDetail>
</Error> 

This article will walk you through the configuration between Qlik NPrinting and Okta when using SAML Authentication, however, please note these values may be slightly different in your environment depending on what attributes you are using.

Environment:

Qlik NPrinting 

Requirements:

• An installed and licensed version of Qlik NPrinting Server April 2018 or newer.
• Administrative Access to Okta. Note: The officially supported IDPs at the time of last update to this article are ADFS, OKTA, and OneLogin. 

The following steps show how to configure Qlik NPrinting NewsStand. You would need to repeat these steps to configure the Web Console.

Enable SAML in Qlik NPrinting:

1. Log into Qlik NPrinting Web Console with an Administrative User
2. Click on Admin and choose Settings
3. Select the SAML tab
   
   
   
   
4. Click on Add Configuration
5. Add a Name for this Configuration. For this example I am using OktaNewsStand.
6. In the Portal drop down menu select NewsStand. Change to WebConsole if you are configuring a connection for the WebConsole.
7. Insert your Service Provider URL. This is the Fully Qualified Domain Name for the NewsStand. Change the FQDN for the WebConsole if you are configuring a connection for the WebConsole.
8. Enter an Entity ID of your choosing. For this example I am using OktaNewsStand.
9. Select the Authenticate user by email option and enter the Attribute for email. For this example I am using OKTA_Email
10. Save this page, we will come back to the Metadata file at a future step.
    
    
    
    
11. Open the SAML page again by selecting the OktaNewsStand name.
12. Click the Download SP metadata button on the top right corner.

Okta Configuration:

1. Login to Okta
2. Click the Admin button
3. Click Applications
4. Click Add Application
5. Under "Can't find an app?" Choose Create New App
6. The Platform will be Web and the Sign on method will be SAML 2.0
   
   
   
   
7. Click Create
8. Choose an App Name. For this example I'm using Qlik NPrinting SAML Configuration.
9. For App visibility select both boxes if you do not want a tile to appear for your users while configuration the application.

10. Click Next
11. Enter the Single sign on URL. This is the same URL that appears in the SP metadata that was downloaded earlier. The URL will be in the Location setting. Do not enter any quotes.
12. Enter the Audience URI (SP Entity ID) this is the Entity ID you setup in Qlik NPrinting. The Entity ID will also be in the SP metadata file that was downloaded earlier. It will be in the entityID setting. Do not enter any quotes.
13. The Default RelayState should remain empty.
14. Name ID format is Transient. This would match the SP metadata file downloaded earlier from Qlik NPrinting.
15. Application username is Okta username.
16. Enter any Attribute and Group Attribute Statements. These values are optional. For this example I added the email attribute.

17. Click 'Next' and fill out the feedback screen as follows - Select Okta Customer and Internal App per screenshot.

18. Click Finish
19. On the Sign On screen right click on the Identity Provider Metadata and choose "Save Link As" ensure you save the file with a .xml file extension.

20. Return to the Qlik NPrinting Web Console - Admin - Settings - SAML Settings
21. Open the SAML page again by selecting the OktaNewsStand name.
22. Browse for the IdP xml Metadata file previously downloaded from the Okta site.
23. Click Save
24. Navigate back to the Okta page and choose the Assignments tab.
25. Choose the necessary users that need access to the Qlik NPrinting NewsStand.

The SAML Authentication should now be setup between Qlik NPrinting NewsStand and Okta.

Testing:

1. Open the Qlik NPrinting NewsStand
2. Choose the OktaNewsStand button

3. You will be redirected to Okta. Enter your credentials.

4. You will be redirected to the Qlik NPrinting NewsStand.