You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: 'Tutorial: Azure AD SSO integration with Tableau Online'
3
-
description: Learn how to configure single sign-on between Azure Active Directory and Tableau Online.
2
+
title: 'Tutorial: Azure AD SSO integration with Tableau Cloud'
3
+
description: Learn how to configure single sign-on between Azure Active Directory and Tableau Cloud.
4
4
services: active-directory
5
5
author: jeevansd
6
6
manager: CelesteDG
@@ -9,23 +9,23 @@ ms.service: active-directory
9
9
ms.subservice: saas-app-tutorial
10
10
ms.workload: identity
11
11
ms.topic: tutorial
12
-
ms.date: 09/24/2021
12
+
ms.date: 06/14/2022
13
13
ms.author: jeedes
14
14
---
15
-
# Tutorial: Azure AD SSO integration with Tableau Online
15
+
# Tutorial: Azure AD SSO integration with Tableau Cloud
16
16
17
-
In this tutorial, you'll learn how to integrate Tableau Online with Azure Active Directory (Azure AD). When you integrate Tableau Online with Azure AD, you can:
17
+
In this tutorial, you'll learn how to integrate Tableau Cloud with Azure Active Directory (Azure AD). When you integrate Tableau Cloud with Azure AD, you can:
18
18
19
-
* Control in Azure AD who has access to Tableau Online.
20
-
* Enable your users to be automatically signed-in to Tableau Online with their Azure AD accounts.
19
+
* Control in Azure AD who has access to Tableau Cloud.
20
+
* Enable your users to be automatically signed-in to Tableau Cloud with their Azure AD accounts.
21
21
* Manage your accounts in one central location - the Azure portal.
22
22
23
23
## Prerequisites
24
24
25
25
To get started, you need the following items:
26
26
27
27
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
28
-
* Tableau Online single sign-on (SSO) enabled subscription.
28
+
* Tableau Cloud single sign-on (SSO) enabled subscription.
29
29
30
30
> [!NOTE]
31
31
> This integration is also available to use from Azure AD US Government Cloud environment. You can find this application in the Azure AD US Government Cloud Application Gallery and configure it in the same way as you do from public cloud.
@@ -34,39 +34,39 @@ To get started, you need the following items:
34
34
35
35
In this tutorial, you configure and test Azure AD single sign-on in a test environment.
36
36
37
-
* Tableau Online supports **SP** initiated SSO.
38
-
* Tableau Online supports [**automated user provisioning and deprovisioning**](tableau-online-provisioning-tutorial.md) (recommended).
37
+
* Tableau Cloud supports **SP** initiated SSO.
38
+
* Tableau Cloud supports [**automated user provisioning and deprovisioning**](tableau-online-provisioning-tutorial.md) (recommended).
39
39
40
-
## Add Tableau Online from the gallery
40
+
## Add Tableau Cloud from the gallery
41
41
42
-
To configure the integration of Tableau Online into Azure AD, you need to add Tableau Online from the gallery to your list of managed SaaS apps.
42
+
To configure the integration of Tableau Cloud into Azure AD, you need to add Tableau Cloud from the gallery to your list of managed SaaS apps.
43
43
44
44
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
45
45
1. On the left navigation pane, select the **Azure Active Directory** service.
46
46
1. Navigate to **Enterprise Applications** and then select **All Applications**.
47
47
1. To add new application, select **New application**.
48
-
1. In the **Add from the gallery** section, type **Tableau Online** in the search box.
49
-
1. Select **Tableau Online** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
48
+
1. In the **Add from the gallery** section, type **Tableau Cloud** in the search box.
49
+
1. Select **Tableau Cloud** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
50
50
51
-
## Configure and test Azure AD SSO for Tableau Online
51
+
## Configure and test Azure AD SSO for Tableau Cloud
52
52
53
-
In this section, you configure and test Azure AD single sign-on with Tableau Online based on a test user called **Britta Simon**.
54
-
For single sign-on to work, a link relationship between an Azure AD user and the related user in Tableau Online needs to be established.
53
+
In this section, you configure and test Azure AD single sign-on with Tableau Cloud based on a test user called **Britta Simon**.
54
+
For single sign-on to work, a link relationship between an Azure AD user and the related user in Tableau Cloud needs to be established.
55
55
56
-
To configure and test Azure AD SSO with Tableau Online, perform the following steps:
56
+
To configure and test Azure AD SSO with Tableau Cloud, perform the following steps:
57
57
58
58
1.**[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
59
59
1.**[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
60
60
1.**[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
61
-
1.**[Configure Tableau Online SSO](#configure-tableau-online-sso)** - to configure the single sign-on settings on application side.
62
-
1.**[Create Tableau Online test user](#create-tableau-online-test-user)** - to have a counterpart of B.Simon in Tableau Online that is linked to the Azure AD representation of user.
61
+
1.**[Configure Tableau Cloud SSO](#configure-tableau-cloud-sso)** - to configure the single sign-on settings on application side.
62
+
1.**[Create Tableau Cloud test user](#create-tableau-cloud-test-user)** - to have a counterpart of B.Simon in Tableau Cloud that is linked to the Azure AD representation of user.
63
63
1.**[Test SSO](#test-sso)** - to verify whether the configuration works.
64
64
65
65
## Configure Azure AD SSO
66
66
67
67
Follow these steps to enable Azure AD SSO in the Azure portal.
68
68
69
-
1. In the Azure portal, on the **Tableau Online** application integration page, find the **Manage** section and select **single sign-on**.
69
+
1. In the Azure portal, on the **Tableau Cloud** application integration page, find the **Manage** section and select **single sign-on**.
70
70
1. On the **Select a single sign-on method** page, select **SAML**.
71
71
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
72
72
@@ -81,13 +81,13 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
> You will get the `<entityid>` value from the **Set up Tableau Online** section in this tutorial. The entity ID value will be **Azure AD identifier** value in **Set up Tableau Online** section.
84
+
> You will get the `<entityid>` value from the **Set up Tableau Cloud** section in this tutorial. The entity ID value will be **Azure AD identifier** value in **Set up Tableau Cloud** section.
85
85
86
86
5. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Federation Metadata XML** from the given options as per your requirement and save it on your computer.
@@ -105,27 +105,27 @@ In this section, you'll create a test user in the Azure portal called B.Simon.
105
105
106
106
### Assign the Azure AD test user
107
107
108
-
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Tableau Online.
108
+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Tableau Cloud.
109
109
110
110
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
111
-
1. In the applications list, select **Tableau Online**.
111
+
1. In the applications list, select **Tableau Cloud**.
112
112
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
113
113
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
114
114
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
115
115
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
116
116
1. In the **Add Assignment** dialog, click the **Assign** button.
117
117
118
-
## Configure Tableau Online SSO
118
+
## Configure Tableau Cloud SSO
119
119
120
-
1. To automate the configuration within Tableau Online, you need to install **My Apps Secure Sign-in browser extension** by clicking **Install the extension**.
120
+
1. To automate the configuration within Tableau Cloud, you need to install **My Apps Secure Sign-in browser extension** by clicking **Install the extension**.
2. After adding extension to the browser, click on **Set up Tableau Online** will direct you to the Tableau Online application. From there, provide the admin credentials to sign into Tableau Online. The browser extension will automatically configure the application for you and automate steps 3-7.
124
+
2. After adding extension to the browser, click on **Set up Tableau Cloud** will direct you to the Tableau Cloud application. From there, provide the admin credentials to sign into Tableau Cloud. The browser extension will automatically configure the application for you and automate steps 3-7.
125
125
126
126

127
127
128
-
3. If you want to setup Tableau Online manually, in a different web browser window, sign in to your Tableau Online company site as an administrator.
128
+
3. If you want to setup Tableau Cloud manually, in a different web browser window, sign in to your Tableau Cloud company site as an administrator.
129
129
130
130
1. Go to **Settings** and then **Authentication**.
131
131
@@ -135,13 +135,13 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
135
135
136
136

137
137
138
-
3. Scroll down up to **Import metadata file into Tableau Online** section. Click Browse and import the metadata file, which you have downloaded from Azure AD. Then, click **Apply**.
138
+
3. Scroll down up to **Import metadata file into Tableau Cloud** section. Click Browse and import the metadata file, which you have downloaded from Azure AD. Then, click **Apply**.
139
139
140
140

141
141
142
142
4. In the **Match assertions** section, insert the corresponding Identity Provider assertion name for **email address**, **first name**, and **last name**. To get this information from Azure AD:
143
143
144
-
a. In the Azure portal, go on the **Tableau Online** application integration page.
144
+
a. In the Azure portal, go on the **Tableau Cloud** application integration page.
145
145
146
146
b. In the **User Attributes & Claims** section, click on the edit icon.
147
147
@@ -159,7 +159,7 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
159
159
160
160
f. To copy the namespace values for the email and surname repeat the above steps.
161
161
162
-
g. Switch to the Tableau Online application, then set the **User Attributes & Claims** section as follows:
162
+
g. Switch to the Tableau Cloud application, then set the **User Attributes & Claims** section as follows:
163
163
164
164
* Email: **mail** or **userprincipalname**
165
165
@@ -169,11 +169,11 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
169
169
170
170

171
171
172
-
### Create Tableau Online test user
172
+
### Create Tableau Cloud test user
173
173
174
-
In this section, you create a user called Britta Simon in Tableau Online.
174
+
In this section, you create a user called Britta Simon in Tableau Cloud.
175
175
176
-
1. On **Tableau Online**, click **Settings** and then **Authentication** section. Scroll down to **Manage Users** section. Click **Add Users** and then click **Enter Email Addresses**.
176
+
1. On **Tableau Cloud**, click **Settings** and then **Authentication** section. Scroll down to **Manage Users** section. Click **Add Users** and then click **Enter Email Addresses**.
177
177
178
178

179
179
@@ -187,12 +187,12 @@ In this section, you create a user called Britta Simon in Tableau Online.
187
187
188
188
In this section, you test your Azure AD single sign-on configuration with following options.
189
189
190
-
* Click on **Test this application** in Azure portal. This will redirect to Tableau Online Sign-on URL where you can initiate the login flow.
190
+
* Click on **Test this application** in Azure portal. This will redirect to Tableau Cloud Sign-on URL where you can initiate the login flow.
191
191
192
-
* Go to Tableau Online Sign-on URL directly and initiate the login flow from there.
192
+
* Go to Tableau Cloud Sign-on URL directly and initiate the login flow from there.
193
193
194
-
* You can use Microsoft My Apps. When you click the Tableau Online tile in the My Apps, this will redirect to Tableau Online Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
194
+
* You can use Microsoft My Apps. When you click the Tableau Cloud tile in the My Apps, this will redirect to Tableau Cloud Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
195
195
196
196
## Next steps
197
197
198
-
Once you configure Tableau Online you can enforce Session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-aad).
198
+
Once you configure Tableau Cloud you can enforce Session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-aad).
0 commit comments