1. Linux
    2. Windows
    3. IIS (Unavailable)
    1. Authentication Methods Overview
    2. Okta (SAML)
    3. OneLogin (SAML)
    4. Curator Users
    5. Azure AD (SAML)
    6. OneLogin (OIDC)
    7. Multifactor Authentication
    8. Signing SAML Login Requests
    9. Active Directory
    10. Windows LDAP (IIS) - DEPRECATED
    1. Windows SSL (IIS) - DEPRECATED
    2. Force SSL
    3. Linux SSL
    4. Windows SSL
    5. Basic HTTP Authentication
    1. E-mail Configuration
    1. High Availability
    1. Windows
    2. Linux
    1. Forward Proxy
    2. Reverse Proxy
    1. Getting Started
    2. Setting Up Your Portal
    3. Adding Your First Dashboard
    4. Creating Your First Page
    1. Supported Tableau Server Versions
    2. REST API Integration
    3. Tableau Cloud Setup
    4. Trusted Tickets
    5. Alternative URL Routing
    6. Tableau Server Repository
    7. Tableau API Debugging
    8. API Connections Overview
    1. (Step 1) Azure App Setup
    2. (Step 2) Service Principal Setup
    3. (Step 3) Power BI Workspace Access
    4. (Step 4) Curator Connection
    1. Integrating ThoughtSpot with Curator
    1. Replace Dashboard URLs
    2. Temporarily Disabling Connections
    1. Adding a Dashboard
    2. Generating Titles
    3. Data Export
    4. Custom Views
    5. Email Subscriptions
    6. Share Workbook
    7. Download Workbook
    8. Pause and Resume Changes
    9. URL Action Overrides (Link Target)
    1. Specify Filter Sheet
    2. Filters
    3. Parameters
    4. Hidden Sticky Filters and Parameters
    5. Apply Button
    6. Filter Categories
    7. Caching Filter and Parameter Options
    1. Updating Data Groups
    2. Exporting Data
    3. Data Manager Basics
    4. Creating a Form
    5. Connecting to Data Manager
    6. User Commenting
    7. Field Calculations
    8. Mark Commenting
    9. Importing Data
    10. Web Data Connector (WDC)
    1. Powerpoint
    2. Overview and Enabling
    3. Email Option
    4. Scheduled Reports
    5. Fallback Image
    6. Watermark Text
    1. Adding a Pulse Metric
    1. Curator Styles
    2. Homepage
    3. Titles and Toolbars
    4. Group Overrides
    5. Page Meta Titles (SEO)
    1. Managing Menus
    2. Menu Items
    3. Restrict Access
    4. Tagged Workbooks
    5. Site Switcher
    1. Looker Embedding
    2. YouTube Embedding
    3. Pages Overview
    4. Tiles
    5. Explorer
    6. Forms
    7. Blogs
    8. User Customized Metrics
    9. Manual Embeds (iFrame)
    10. SSRS Embedding
    11. Box Embedding
    1. Files
    1. Error Pages
    2. Tutorials
    3. Notices
    1. Hidden Content
    2. Search
    3. Keywords
    4. Favorites
    5. Featuring Content
    6. Thumbnail Preview Images
    1. Loading Screens
    8. Email Formatting
    1. Users and Groups Overview
    2. User Sync and Membership Sync Overview
    3. Reset User's Password
    4. Frontend Users
    5. Automatic License Provisioning
    6. Just-in-time (JIT) Provisioning
    7. Username Mapping
    8. Custom Attributes
    1. Frontend User Permissions
    2. Password Change
    3. Password Reset
    4. Password Expiration and Complexity
    5. Disabling Link-preview Security
    6. User Throttling
    1. Third Party Cookies
    1. Overview
    2. Password Reset
    1. System Notifications
    2. Data Manager Notifications
    1. Troubleshooting Load Times
    2. Cache Warming
    1. Updating License Key
    1. Web Accessibility
    1. System Upgrade
    2. Disable Curator Upgrades
    3. Offline Upgrades (Airgapped)
    4. Dependency Updates
    5. Troubleshooting Upgrades
    1. Importing and Exporting
    1. Curator Backup
    2. Taking a Manual Full Backup
    3. Manual Restoration of Curator Backup
    1. Server Hardening Procedures
    2. Disk Speed Metrics
    3. Filesystem Permissions
    4. Updating Curator Logging
    5. Linux: Cron Troubleshooting
    1. Curator API Overview
    2. Curator Integration Overview
    1. Authentication
    2. Integration
    3. Curator API
    4. Tableau API
    5. Content
    6. User API
    1. Scripts
    2. Commands
    3. Subscription Routing
    Frontend Quickstart - Homepage
    Frontend Quickstart - Dashboard
    Backend Quickstart - Styling
    Backend Quickstart - Adding Content
    Backend Quickstart - Adding Content (Menu and Navigation)
    Backend Quickstart - Adding Content (Filters, Parameters, Tutorials & Loading Screens)
    Get Started with Curator in 5 Minutes
    Windows Installer
    .htaccess file
    Dockerfile
    API Example: Creating a File (Python)
    Sample Hero Images (jpgs)
    Logging.php file
    1. Menu Tuning
    2. Cache Warming
    1. Password Settings
    Org Chart
    ThoughtSpot Search

Server Management: System Administration

Server Hardening Procedures

Introduction

Securing your data is vitally important. Curator uses many checks and procedures to ensure the safety of your system.

Many security settings are already set up for your site "out of the box", however, additional steps can be taken by your system administrators to further harden the setup upon installation.

Hardening Steps

  1. SSL Certificates: Make sure SSL certificates are added to your website! Secure transportation of data between the users and the server is very important. Click here to follow the instructions for SSL certificate installation. Both Tableau Server and Curator should utilize SSL for user traffic.

  2. Force SSL Traffic: You will also want to force users to use this new SSL route. Curator has a simple toggle to force users over HTTPS instead of HTTP. Simply enable this setting in Settings->Curator->Portal Settings to ensure users use this route.

  3. While you are in “Portal Settings” for Step #2, also set the “Forced Curator Domain” option to prevent Host Header Injection.

  4. After enabling SSL, make sure your SSL Ciphers are up to date. You can update these values using the SSL Protocols / Ciphers steps on the Linux SSL installation page.

  5. In addition to setting SSL Ciphers in your curator.conf, you may wish to adjust the default values for Strict-Transport-Security and Expect-CT. There are four lines to set these values toward the bottom of the file. These are commented out by default. Simply uncomment these lines and restart Curator to utilize them.

  6. Other than that, Curator should pass most security scans “out of the box”. If you do run into any issues, though, please let us know! We’d love to help you resolve them: either through core Curator changes, or (more likely) configuration adjustments.

  7. If your website is public available, you may wish to utilize SSLLabs.com and SecurityHeaders.com to further test your configuration.

Additional Information

Tableau Server: one big callout: One big callout for the system is Tableau Server must also be available to end users for them to be able to access dashboards.

For example, if Tableau Server is on-prem and behind the firewall, the end users won’t be able to access the dashboards unless they are using the VPN. Because of this, you will want to place Tableau Server on the open internet as well, following their hardening instructions. If you are using Tableau Cloud, then you do not need to worry about this, as it is already accessible.

WAF Systems: If you’d like an extra layer of protection, many of our customers utilize WAF systems in front of both Tableau Server and Curator. To configure Curator for a WAF, use these instructions. To configure Tableau Server, use Tableau’s reverse proxy instructions, as well as Curator’s “alternative URL routing” instructions.