How do I set up impersonation (Section Access) for a Qlik Sense SaaS App Datasource?

Configuring impersonation (Section Access) for a Qlik Sense SaaS App Data Source is crucial for maintaining secure and customized data access. Here’s a quick guide to help you set it up:

1) Create a Identity Provider in Qlik

a) Create a pair of keys (privatekey.pem and publickey.cer) using the following Qlik article.

https://qlik.dev/authenticate/jwt/create-signed-tokens-for-jwt-authorization/

b) In Qlik Sense Console in Qlik Cloud, create a new Identity Provider

c) Type should be JWT (shown in yellow) and the JWT Vertificate (shown in blue) is the content of the file publickey.cer from step 1). Issuer and Key ID could be left blank and Qlik will fill them.

2) Add a datasource in Mail & Deploy that supports impersonation (Section Access) 

a) Complete the fields Name, URL, API Key

b) JWT Key ID and JWT Issuer can be found in the properties of the JWT Identity Provider created in step 1)

c) JWT Private Key PEM (shown in blue) is the content of the file privatekey.pem created in step 1)

d) The Default User Subject is the id of the User used by default (that is, the user used when not using the M&D Extensions for Qlik Sense)

e) Press the sync icon to get the list of App and select the one to be assigned to this datasource

The JWT Issuer and JWT Key ID are found here:

The Default User Subject can be found here: