Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

Qlik Sense: Work around the 20 characters limit on user names when using ADFS (SAML)

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Damien_Villaret
Support
Support

Qlik Sense: Work around the 20 characters limit on user names when using ADFS (SAML)

Last Update:

Feb 23, 2021 4:26:05 AM

Updated By:

Sonja_Bauernfeind

Created date:

Oct 4, 2017 2:29:58 PM

This article explains how to work around the 20 characters limit in the windows account name in ADFS when using SAML.
This article assumes you have already set up ADFS correctly with Qlik Sense.

Resolution:


In order to work around this issue, you will need to create a custom claim description.
Windows account name is limited to 20 characters length. UPN holds the full user name but also the domain name (Example: xbxpoufaloiacsvignhv.ekevezajzktyfzccvhzl@domain.local).
So, the simplest is to create a custom claim and extract the string before @ from the UPN claim description.

In ADFS, in claim descriptions, choose "Add Claim Description"


User-added image

Create a new claim with a name and claim type of your choice. Claim type must have the below format.


User-added image

In Relying Party Trusts, choose the Reying party trust created for Qlik Sense and in the right pane, choose "Edit Claim Rules"


User-added image

In the existing claim rule, create a second rule based on template "Send Claims Using a Custom Rule" with the following rule:


c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn", Value =~ "^.*(@).*$"]
 => issue(Type = "http://temp.org/20charname", Value = RegexReplace(c.Value, "@.*", ""));


User-added image

On the Qlik Sense side, in virtual proxy settings, including the newly created claim description as the SAML attribute for user ID


User-added image


You should now be able to log in to the hub, the user name will be registered correctly in Qlik Sense even if it is more than 20 characters long.
 

Labels (1)
Contributors
Version history
Last update:
‎2021-02-23 04:26 AM
Updated by: