Hello there!

Need Help? We are right here!

support
miniOrange Email Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com

Tableau Single sign on (sso)
miniOrange provides a ready to use solution for Tableau Platform. You will be ready to roll out secure access, to your users to login, into Tableau using our Single Sign On solution.

Tableau Single Sign On


What is Tableau?

Tableau is a powerful business intelligence tool used for data visualizations in the form of charts, graphs, and so on to gain business insights for the better development of a company. It is much interactive tool which can help business managers, team leaders to make more appropriate decisions speedily. It can help non technical staff also to create customized dashboards for their work. The drag and drop interface of Tableau makes it really fast.

Logging in to Tableau using Single sign on (SSO) is needed to use this application effectively. If user is already logged in into his website user should get autologged in into Tableau using the credentials of Identity provider (IDP).


miniOrange Supports the following Usecases for Tableau

Login into Tableau using Website credentials

miniOrange provides Single Sign On (sso) solution to login to Tableau using your existing website credentials and miniorange idp plugin in those websites.


Login into Tableau from External Identity Sources

miniOrange provides Single Sign On (sso) solution to login to Tableau from your existing website using connectors or SAML SP plugins.




Tableau for embedded views in IFrame

The miniOrange plugin will redirect the authenticated user to the page with the Iframe without authenticating twice.




Login into Tableau using Website credentials


Our miniOrange saml IDP plugin allows you to login into Tableau with the website credentials. You need to install this plugin in your website and configure with Tableau.


    Tableau Single Sign-On (SSO): Tableau miniOrange SSO Flow Diagram

Step by step guide to set up Tableau as SP use Website credentials to login:


    Step 1: Add SAML authentication method in Tableau and get metadata

  • Log in to your Tableau Dashboard as Admin.
  • Go to Authentication Settings in the Settings menu.

  • Tableau Single Sign-On (SSO): Authentication Settings

  • Enable SAML authentication by checking the Single Sign On (sso) with SAML checkbox.
  • Click on edit connection

  • Tableau Single Sign-On (SSO): Enable SAML SSO

  • Note down the Tableau Entity ID and Assertion Consumer Service URL (ACS URL) which will be needed to configure the plugin.
    Note: If your Tableau SP is configured to send Signed Requests then you will need to provide the certificate in the plugin as well. You can get the certificate from the Tableau Metadata.

  • Tableau Single Sign-On (SSO): Tableau Metadata

    Step 2: Configure miniOrange SAML IDP plugin for your website

  • In miniOrange SAML IDP plugin, go to Service Providers tab.

  • Tableau Single Sign-On (SSO): wp_miniorange_idp_plugin_sp_tab

  • Enter the following values:

  • Service Provider Name Choose appropriate name according to your choice
    SP Entity ID or Issuer Tableau Entity ID
    ACS URL X.509 Certificate (optional) Tableau Assertion Consumer Service URL
    For Signed Request Paste certificate value you copied from the Tableau Metadata file
    NameID Format  Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
    Response Signed Unchecked
    Assertion Signed Checked
    Encrypted Assertion Unchecked

  • You will need to upload the IdP metadata or give certain IdP information in Tableau.

  • Tableau Single Sign-On (SSO):import_idp_metadata

  • You can get this information from the IDP metadata tab in the plugin.

  • Tableau Single Sign-On (SSO):import_idp_metadata

    Step 3: Configure user attributes

  • You will need to configure user attributes to be sent in the SAML response which Tableau needs to log in the user. You can do this under the Attribute/Role Mapping Tab in the plugin. Note the Attributes required from Tableau.

  • Tableau Single Sign-On (SSO): Tableau Attribute Mapping

  • Configure the plugin to send relevant user details.
    Please Note: The name you provide in the plugin for each attribute has to match the name being asked in the plugin dashboard.

  • Tableau Single Sign-On (SSO): WordPress Attribute Mapping

  • Select users you want to enable SSO in the Tableau dashboard.
  • Tableau Single Sign-On (SSO): Select SSO Users

  • Click on the Test Login button in the Tableau Dashboard to Test the SSO.
  • Tableau Single Sign-On (SSO): Test Connection

  • You can see the following screen after a successful SSO.
  • Tableau Single Sign-On (SSO): Test Connection Results


Login into Tableau from External Identity Sources

In this case miniOrange will act as a broker between the customer’s IdP and the applications (e.g WordPress and Tableau).The miniOrange SAML plugin and the Tableau site will be configured with miniOrange as broker. Customer IdP will be configured as an authentication source in the miniOrange.


    Tableau Single Sign-On (SSO): Tableau miniOrange SSO Flow Diagram

Workflow:

    1. Login into the WordPress site using miniOrange SAML IdP credentials.

    2. In the Login with SAML case, the plugin will send a SAML Request to the miniOrange IdP and miniOrange IdP will forward this request to the corresponding customer’s IdP. All this happens behind the scene and the user will only see their corresponding IdP’ login page upon clicking on the Login with SAML link.

    3. After successful authentication, the customer’s IdP will send a SAML Response to the WordPress site through miniOrange IdP. And the user gets redirected and logged in to the WordPress site

    4. When the user clicks on the Tableau link present on the WordPress site, the Tableau site will send a SAML Request to the miniOrange IdP and miniOrange will forward this request to the corresponding customer’s IdP.

    5. Since the user session already exists at the IdP, the user will not be prompted to login again.

    6. Upon receiving the request, the customer’s IdP will send the SAML Response to the Tableau site through miniOrange and the user gets logged into the Tableau site as well.

Step by step guide to set up Tableau as SP and have multiple IDPs:


    Step 1:Add SAML authentication method in Tableau and get metadata.

  • Follow step 1 from previous usecase

  • Step 2: Configure saml Tableau app

  • From your miniOrange dashboard, go to app -> configure apps

  • Tableau Single Sign-On (SSO):configure_app

  • Search for tableau app
  • Tableau Single Sign-On (SSO):tableau_saml_app

    Tableau Single Sign-On (SSO):tableau_saml_app_configure

  • You can choose to Import metadata and browse the file dowloaded in step 1 OR
  • Enter the following values:
  • Service Provider Name Choose appropriate name according to your choice
    SP Entity ID or Issuer Tableau Entity ID
    ACS URL X.509 Certificate (optional) Tableau Assertion Consumer Service URL
    For Signed Request Paste certificate value you copied from the Tableau Metadata file
    NameID Format  Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
    Response Signed Unchecked
    Assertion Signed Checked
    Encrypted Assertion Unchecked

    Step 3: Import IDP metadata in Tableau

  • You need to upload the IdP metadata or give certain IdP information in Tableau.
  • You can get this information from the Metadata Tab in the plugin you configured.
  • Here you will have two options to download metadata.
  • One when you choose miniOrange as IDP and second would be for external IDP i.e for miniOrange as broker

  • Tableau Single Sign-On (SSO):idp_metadata

    Tableau Single Sign-On (SSO):download_idp_metadata

  • Next step is to upload the file in tableau.
  • Browse for the file and then click on Apply.
  • Tableau Single Sign-On (SSO):import_idp_metadata

    Step 4: Configure user attributes

  • Same as the step 3 in above usecase.

Embedded views :

Steps to set up Tableau for embedded views in IFrame:


  • After following above steps to Single sign on(sso)in Tableau select Default Authentication Type of Embedded Views to Authenticate using an inline frame from Authentication Settings.

  • Tableau Single Sign-On (SSO): Embedding Options

    Tableau Single Sign-On (SSO): Default Authentication Type

  • Note as shown is above image this feature is not supported by all IDPs.
  • Go to your Tableau View and select the view you desire to show in an Iframe.

  • Tableau Single Sign-On (SSO): Embedding Views Code

  • Select the Share option from the top right corner section of your view. Copy the Embed Code or Link.
  • You can use the embed code or link to load the view in an Iframe.

For Further Details:

See our step by step guide for Single Sign on.
https://help.tableau.com/current/online/en-us/saml_config_site.htm

We offer Security Solutions of Single Sign-On, Two Factor Authentication, Fraud Prevention and much more.

Please call us at +1978 658 9387 (US), +91 77966 99612 (India) or email us at info@xecurify.com