## Set up Qlik Sense Enterprise on Windows

URL: https://docs.atlan.com/apps/connectors/business-intelligence/qlik-sense-enterprise-on-windows/how-tos/set-up-qlik-sense-enterprise-on-windows

> :::warning Who can do this? You will need your Qlik Sense Enterprise on Windows administrator to complete these steps - you may not have access yourself.

:::warning Who can do this?
 You will need your Qlik Sense Enterprise on Windows administrator to complete these steps - you may not have access yourself.

:::

## Create user in Qlik Sense Enterprise on Windows

:::info **Did you know?** 
 By default, your identity provider for your Qlik Sense Enterprise on Windows version will be Microsoft Windows. So, your Microsoft Windows users will be your Qlik users. To add a new user in this case, you only need to create a [new Windows local account](https://support.microsoft.com/en-us/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d).

:::

We recommend that you create a new user Qlik Sense Enterprise on Windows for integration with Atlan.

To create a new user, follow the [steps in the Microsoft Windows documentation](https://support.microsoft.com/en-us/windows/create-a-local-user-or-administrator-account-in-windows-20de74e0-ac7f-3502-a866-32915af2a34d) and then add the new user:

1. Log in to your Qlik Sense Enterprise on Windows instance.
2. Navigate to the active directory or identity provider of your Qlik Sense Enterprise on Windows version and add the new user.

## Allocate user access

Once you've created a new user, you will need to allocate user access for integration with Atlan.

To [allocate user access](https://help.qlik.com/en-US/sense-admin/February2023/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/manage-user-access.htm#anchor-1) to the new user:

1. Log in to _Qlik Management Console_ (QMC): `https:///qmc`.
2. To allocate a license to the new user, in the left menu, click **License management**.
3. In the right panel for _License management_, click **Professional access allocations**.
4. At the bottom of the _Professional access allocations_ screen, click **Allocate**.
5. From the _Users_ dialog, select the [new user you created](https://docs.atlan.com/llms/connectors/qlik-sense-enterprise-on-windows/set-up-qlik-sense-enterprise-on-windows/llms.txt) and click **Allocate** to complete user allocation.

You can also set up roles and groups for robust access management.

## Set permissions

:::info **Did you know?** 
 Atlan does **not** make any API requests or queries that will update the objects in your Qlik Sense Enterprise on Windows instance.

:::

Once you've added the new user, you will need to provide the new user with `Read` permission to your streams, apps, sheets, charts, and connections.

To set the [minimum permissions](https://help.qlik.com/en-US/sense-admin/February2023/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Deploy_QSEoW/Server-Security-Authorization-Access-Control.htm) required to [crawl Qlik Sense Enterprise on Windows](https://docs.atlan.com/llms/connectors/qlik-sense-enterprise-on-windows/crawl-qlik-sense-enterprise-on-windows/llms.txt): 

1. Log in to _Qlik Management Console_ (QMC): `https:///qmc`.
2. In the left menu under _Manage Resources_, click **Security rules**.
3. At the bottom of the _Security rules_ screen, click **Create new**. 
4. In the _Edit security_ dialog, enter the following details:
 1. For _Name_, enter a meaningful name for your security rule. 
 2. For _Basic_, under _Actions_, click **Read** to provide `Read` access.
 3. At the bottom of the dialog, click **Apply** to apply your security rule. 

:::warning

If JWT authentication is already enabled for your Qlik Sense Enterprise on Windows instance, you can proceed to [generating a JWT](https://docs.atlan.com/llms/connectors/qlik-sense-enterprise-on-windows/set-up-qlik-sense-enterprise-on-windows/llms.txt). If Windows authentication is already enabled for your Qlik Sense Enterprise on Windows instance, you can directly proceed to [crawling Qlik Sense Enterprise on Windows](https://docs.atlan.com/llms/connectors/qlik-sense-enterprise-on-windows/crawl-qlik-sense-enterprise-on-windows/llms.txt).

:::

## (Optional) Create a virtual proxy

Once you've set permissions for the new user, you can create a [virtual proxy](https://help.qlik.com/en-US/sense-admin/February2023/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/virtual-proxies-overview.htm) for authentication.

Atlan supports the following authentication methods for Qlik Sense Enterprise on Windows:

### Windows authentication

:::info **Did you know?** 
 When Qlik Sense Enterprise on Windows is installed, it automatically creates a default virtual proxy called `Central` without a prefix that supports Windows authentication. If it is still available on your instance, you can skip creating a new one and simply edit it.

:::

To [create a virtual proxy](https://help.qlik.com/en-US/sense-admin/February2023/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/create-virtual-proxy.htm) for Windows authentication:

1. Log in to _Qlik Management Console_ (QMC): `https:///qmc`.
2. In the left menu under _Configure Systems_, click **Virtual proxies**.
3. At the bottom of the _Virtual proxies_ screen, click **Create new**.
4. In the _Edit virtual proxy_ screen:
 1. For _Identification_, enter the following details:
 1. For _Description_, add a description for your virtual proxy.
 2. For _Prefix_, add a path name in the proxy’s URI - use only lowercase letters for the prefix.
 3. For _Session cookie header name_, add the name of the HTTP header used for the session cookie.
 2. For _Authentication_, enter the following details:
 1. For _Authentication method_, select **Ticket** as the authentication method. 
 2. For _Windows authentication pattern_, select **Windows**. 
5. Click **Apply** to save your authentication details.

### JWT authentication

To [create a virtual proxy](https://help.qlik.com/en-US/sense-admin/February2023/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/create-virtual-proxy.htm) for JSON Web Token (JWT) authentication:

1. Log in to _Qlik Management Console_ (QMC): `https:///qmc`.
2. In the left menu under _Configure Systems_, click **Virtual proxies**.
3. At the bottom of the _Virtual proxies_ screen, click **Create new**.
4. In the _Edit virtual proxy_ screen:
 1. For _Identification_, enter the following details:
 1. For _Description_, add a description for your virtual proxy.
 2. For _Prefix_, add a path name in the proxy’s URI - use only lowercase letters for the prefix.
 3. For _Session cookie header name_, add the name of the HTTP header used for the session cookie.
 2. For _Authentication_, enter the following details:
 1. For _Authentication method_, select **JWT**. 
 2. For _JWT certificate_, you can either:
 - To generate a key pair using `openssl`, open the `public.key` file in a text editor of your choice, copy the key, and paste it_._
 - To use the same certificate as your Qlik Sense Enterprise on Windows instance, you can find it in the path `C:\ProgramData\Qlik\Sense\Repository\Exported Certificates\.Local Certificates`. Open the `server.pem` file in a text editor of your choice, copy the content, and paste it.
 3. For _JWT attribute for user ID_, add the JWT attribute name for the attribute describing the user ID. 
 4. For _JWT attribute for user directory_, add JWT attribute name for the attribute describing the user directory.
 3. (Optional) Under _Advanced_, for _Host allow list_, add the host IP addresses of your Qlik Sense Enterprise on Windows deployment.
5. Click **Apply** to save your authentication details.

## (Optional) Generate a JWT

To generate a JSON Web Token (JWT) for [crawling Qlik Sense Enterprise on Windows](https://docs.atlan.com/llms/connectors/qlik-sense-enterprise-on-windows/crawl-qlik-sense-enterprise-on-windows/llms.txt):

1. Open the [JWT](https://jwt.io/) website.
2. At the top of the screen, click **Debugger**.
3. For _Algorithm_, click the dropdown arrow and select **RS256**.
4. For _Payload_, add the [user ID and directory](https://docs.atlan.com/llms/connectors/qlik-sense-enterprise-on-windows/set-up-qlik-sense-enterprise-on-windows/llms.txt) for your virtual proxy.
5. For _Verify signature_, paste the `server_key.pem` (private key) and `server.pem` (public key) pair from `C:\ProgramData\Qlik\Sense\Repository\Exported Certificates\.Local Certificates` in the appropriate fields.
6. In the left _Encoded_ field, copy the generated token and save it in a temporary location.

 :::warning

 To confirm that you've used the right key pair, navigate to the bottom of the screen and ensure that you can see the _Signature Verified_ status.

 :::

---