4 Replies Latest reply on Nov 29, 2017 12:35 AM by Aravind N

    Implementing SSO for DB when logging in

    Aravind N

      Hi Folks,

       

      I have requirement to implement a SSO for data source when a user is logging into a worksheet in tableau Server.

       

      i am aware of embed and prompt concepts in tableau while publishing, but in DB we have security model designed where we have a separate credentials for each and every individuals and hence we need a SSO design for data source in tableau server.

       

      Regards,

      Aravind

        • 1. Re: Implementing SSO for DB when logging in
          Wilson Po

          Hi Aravind,

          What DB technology are you using?  There's a couple of strategies for pass viewer credentials back to the DB for live connections;  it depends on the connection type and what authorization mechanism they support that Tableau might be able to take advantage of.  Is the major concern around ensuring users only see their data or is this more related to profiling the viewers and what tables they are accessing?  How are users leveraging this data source today and is there other applications with an SSO strategy to login to this data source already?  

          1 of 1 people found this helpful
          • 2. Re: Implementing SSO for DB when logging in
            Nathan Downs

            A specific example is when using AtScale as a data source.  Sure we could embed a service account, but the idea is that each user's credentials are authenticated.  You need to prompt the user for their log in info.  Then you can take advantage of canary queries to see if folks have access to certain tables or use security dimensions to filter the data.  All of this security is native in the data source, you just want Tableau to take advantage of it.

            1 of 1 people found this helpful
            • 3. Re: Implementing SSO for DB when logging in
              Aravind N

              Hey Wilson, Thanks for your response

               

              we are using Redshift as data source and Users should only see the data according to their privileges

               

              We have came up with a solution to go ahead with Tableau CDS.

              • 4. Re: Implementing SSO for DB when logging in
                Aravind N

                Thanks Nathan !!

                 

                You need to prompt the user for their log in info - you mean to say, like enter the tableau server login and bypassing the data source login with Atscale API !!. Please correct me if i am wrong, in my understanding