How do I set up impersonation (Section Access) for a Qlik Sense Server App Datasource?

Setting up impersonation (Section Access) for a Qlik Sense Server App DataSource ensures secure and tailored access to your data. Here's how you can configure it effectively:

1) Create a Virtual Proxy in Qlik Sense

a) Assign a name Description, Prefix and Session cookie header name of your choice (shown in green)

b) The following fields are mandatory (shown in yellow):

Authentication method: JWT

JWT attribute for user ID: userId

JWT attribute for user directory: userDirectory

c) The JWT certificate (shown in blue) is the content of the file located in the Qlik Sense server:

C:\ProgramData\Qlik\Sense\Repository\Exported Certificates\.Local Certificates\server.pem

d) Associate a Proxy

e) Add a new server node to LOAD BALANCING

2) Add a datasource in Mail & Deploy that supports impersonation (Section Access)

a) Complete the fields Name, Host, Port, Protocol

b) In Virtual Proxy Path use the name you set in prefix in step 1)

c) JWT Private Key PEM (shown in blue) is the content of the  file located in the Qlik Sense server: 

C:\ProgramData\Qlik\Sense\Repository\Exported Certificates\.Local Certificates\server_key.pem

d) Default Directory together with Default User ID define the default user (that is, the user used when not using the M&D Extensions for Qlik Sense)

e) Press the sync icon to get the list of App and select the one to be assigned to this datasource