Reporting Portal supports two types of authentication with Tableau Server:
Trusted Authentication
OpenID Connect & Trusted Authentication
Trusted authentication simply means that you have set up a trusted relationship between Tableau Server and Reporting Portal/Configuration web applications. When Tableau Server receives requests from Reporting Portal/Configuration it sends also credential token that was issued for licensed Tableau Server user.
How to configure Tableau Server to use Trusted Authentication please follow the link .
Client browsers must be configured to allow third-party cookies in order to use trusted authentication with embedded views.
It is the responsibility of the customer to make sure that the license agreements with Tableau are respected.
To add a Tableau reporting source using trusted authentication:
Open ATS Configuration Manager and navigate to the Reporting card.
Press Add source.
The New reporting source pane is loaded. Fill in the fields presented as follows:
Name: Enter a name for the reporting source. This name must be unique.
Description: Enter a description for the reporting source.
Endpoint: Enter the Endpoint URL of the reporting source.
Site name: Enter the site name of the Tableau reporting source.
A Tableau site is a grouping of workbooks and other resources on a server. A site has its own URL and users. It is walled off from other sites on the server. A developer program sandbox is a site on the Tableau Online server.
User Identity & Access: Select the Enable Trusted Authentication radio box.
User: Enter a valid a user name that has access to the server.
Password: Enter the password for the user name specified.
Check connection: Check the connection using the details entered above by click on the Check connection button.
Press Add or Add and edit.
When clicking the Add option all the entered data is saved, the blade is closed, and the user is redirected to the All Reporting sources blade.
When clicking the Add and edit option all entered data is saved and the user is redirected to the Edit source blade.
OpenID Connect is a standard authentication protocol that lets users that are successfully signed in to an identity provider (IdP) to use Tableau Server. Tableau Server can use ATS Security Manager as Identity provider. After they have successfully signed in to Reporting Portal (ATS Security Manager is used as IdP), they are automatically signed in to Tableau Server and they can load and view Tableau visual reports in Reporting Portal.
Configuring OpenID Connect involves several steps.
To configure OpenID Connect on Tableau Server please follow the instructions in this link.
To add a Tableau reporting source using ATS Security Manager as the identity provier:
Open ATS Configuration Manager and navigate to the Reporting card.
Press Add source.
The New reporting source pane is loaded. Fill in the fields presented as follows:
Name: Enter a name for the reporting source. This name must be unique.
Description: Enter a description for the reporting source.
Endpoint: Enter the Endpoint URL of the reporting source.
Site name: Enter the site name of the Tableau reporting source.
A Tableau site is a grouping of workbooks and other resources on a server. A site has its own URL and users. It is walled off from other sites on the server. A developer program sandbox is a site on the Tableau Online server.
User Identity & Access: Select the Enable OpenID Connect and Trusted Authentication radio box.
User: Enter a valid a user name that has access to the server.
Password: Enter the password for the user name specified.
These credentials will be used to generate a credential token, which will be used for accessing the Tableau API. The Tableau API only works with a credentials token and the OpenID authentication flow is not applicable here.
Check connection: Check the connection using the details entered above by click on the Check connection button.
Press Add or Add and edit.
When clicking the Add option all the entered data is saved, the blade is closed, and the user is redirected to the All Reporting sources grid.
When clicking the Add and edit option all entered data is saved and the user is redirected to the Edit source blade.
Open the new Tableau reporting source.
Client Id, Client Secret and Configuration URL are automatically generated by the Reporting Portal. These values should be used when configuring OpenID Connect authentication method on Tableau Server.
When using OpenID Connect, Tableau Server identifies the user from the claims stored in the token issued by ATS Security Manager. Tableau Server searches for a username in the Tableau’s repository that matches the email claim from the ATS Security Manager token. When a username match succeeds the user can load Tableau visual reports.
For this authentication flow to work, the user must have email address stored in ATS Security Manager. This same email address must match with the user name of a licensed Tableau user.
Can we improve this topic?