9 Replies Latest reply on Jan 21, 2020 1:28 PM by satish.parvathaneni

    Tableau Server access for external users


      Hi Team,


      External users want to access Tableau Server by using web application, In that case which authentication we need to setup for external users to access the tableau server.





        • 1. Re: Tableau Server access for external users
          Tharashasank Davuluru

          Hi Bajee,

          you can  leverage Trusted Tickets/Trusted Authentication via a web server. In this case you could use the Javascript API to create a custom web application that would trust your URL and would then check your local or AD user store for the content authorization. Content could be maintained safely via separate sites.

          Check this thread:Tableau server access for Internal and external users




          • 2. Re: Tableau Server access for external users
            Madhusudhan Khambham

            Hi MULLA BAJEE VALI,


            Tharashasank Davuluru You are right..and i am giving a live example here..


            We use Webseal for providing access to our external users.

            What it will do is, When you login to your portal the IDM will send communication to both your Webseal, your Tableau Server and get authenticated.

            If you are good then a valid session will be established to both your portal and the Tableau server.


            Now, you can access the reports from your Tableau server by using your Tableau API's and show them as iFrames in the portal or you can embed them in to your web portal.



            Madhu K

            1 of 1 people found this helpful
            • 3. Re: Tableau Server access for external users
              Chad Smith

              Tableau Newbie here; How do you control the data so these external users only see information relevant to them?


              To be more specific, our users (1000+) log into our external website, we will present a dashboard to them that is filtered with only their information. Our Tableau server uses LDAP for authentication but none of these external users will be on LDAP. Do we pass a username that corresponds to a generic LDAP userID and then control the data with a filter?


              Looking for suggestions...

              • 4. Re: Tableau Server access for external users
                Arvind Kumar

                Hi Madhusudhan,


                We have integrated backend application called “Tableau Server” with WebSEAL and enabled form based authentication in Non-Prod environment. In our landscape, the customer requirement is just to implement form based authentication for the users who are accessing Tableau Server from external network. So we have enabled form based authentication for those users who try to access the Teblau Server from internet , that mean the users who are outside or not in customer network should able to SSO/authenticated from WebSEAL to Tableau Server (Backend Application) via form based authentication.


                In order to accomplish this integration, We have created junction root “/” on WebSEAL and established a connection with backend application (Tableau Server), junction is up and running,

                We have map dns entry URL on junction called https://analytics.qa.fonterra.com from actual hostname of tableau, When we hit this URL it goes to WebSEAL and sending a login page for the user. After providing user id and password on the loge page, request went to backend application and response to the browser page throws an error sign in failed and WebSEAL debug getting an error 500 “internal server error” and HTTP/1.1 401 Unauthorized. In actually backend application (Tableau Server) is up and running and successfully accessible directly from URL.


                could could you please suggest which type of junction you used in your landscape? we tried standered and virtual host junction both the types but the outcome is same with the errors. if there is possibility would you please suggest which document you have used for WebSEAL and Tableau server integration.



                Arvind Kumar

                • 5. Re: Tableau Server access for external users
                  Jeff Meeks

                  I think I know the answer to this, but I am curious. Since these are "External" users, I am assuming that some segment of Tableau is internet exposed. Is that correct?


                  • 6. Re: Tableau Server access for external users



                    Were you able to resolve this issue ?


                    I mean can you login to your tableau server now from your tableau app ? Can you please help ,we are using the exact configuration you are using webseal .




                    • 7. Re: Tableau Server access for external users

                      Jeff ,


                      Do you know how tableau application can be granted access externally ? Can you please share any useful references ,we recently implemented SAML and finding it hard to access application externally.


                      Thank you!


                      • 8. Re: Tableau Server access for external users
                        Michael Gillespie

                        No, no part of Tableau Server is or should be directly exposed to the internet.


                        The usual recommended approach is a reverse proxy setup on your external firewall.  Tableau Server should never be installed in a DMZ, as the server MUST hold the data that is being used to generate the visualizations.  The Server should be on the internal network only.

                        1 of 1 people found this helpful
                        • 9. Re: Tableau Server access for external users

                          We were able to achieve SAML with F5 Load balancer and used IBM Webseal servers to configure junction to be able to access servers outside the network.


                          Thank you !