1. Linux
    2. Windows
    3. IIS (Unavailable)
    1. Authentication Methods Overview
    2. Okta (SAML)
    3. OneLogin (SAML)
    4. Curator Users
    5. Azure AD (SAML)
    6. OneLogin (OIDC)
    7. Multifactor Authentication
    8. Signing SAML Login Requests
    9. Active Directory
    10. Windows LDAP (IIS) - DEPRECATED
    1. Windows SSL (IIS) - DEPRECATED
    2. Force SSL
    3. Linux SSL
    4. Windows SSL
    5. Basic HTTP Authentication
    1. High Availability
    1. Windows
    2. Linux
    1. Forward Proxy
    2. Reverse Proxy
    1. Getting Started
    2. Setting Up Your Portal
    3. Adding Your First Dashboard
    4. Creating Your First Page
    1. REST API Integration
    2. Tableau Cloud Setup
    3. Embed Authentication
    4. Trusted Tickets
    5. Alternative URL Routing
    6. Tableau Server Repository
    7. Tableau API Debugging
    8. API Connections Overview
    1. (Step 1) Azure App Setup
    2. (Step 2) Service Principal Setup
    3. (Step 3) Power BI Workspace Access
    4. (Step 4) Curator Connection
    5. Troubleshooting Power BI Access
    1. Integrating ThoughtSpot with Curator
    1. Replace Dashboard URLs
    2. Temporarily Disabling Connections
    1. Share Workbook
    2. Adding a Dashboard
    3. Tableau Worksheets and Stories
    4. Generating Titles
    5. Data Export
    6. Custom Views
    7. Email Subscriptions
    8. Download Workbook
    9. Pause and Resume Changes
    10. URL Action Overrides (Link Target)
    11. Dashboard Settings
    1. Adding a Pulse Metric
    1. Preloading Filters and Parameters
    2. Specify Filter Sheet
    3. Filters
    4. Parameters
    5. Hidden Sticky Filters and Parameters
    6. Apply Button
    7. Filter Categories
    8. Caching Filter and Parameter Options
    1. Updating Data Groups
    2. Sending Data to Webhooks
    3. Web Data Connector (WDC)
    4. Exporting Data
    5. Data Manager Basics
    6. Creating a Form
    7. Connecting to Data Manager
    8. User Commenting
    9. Field Calculations
    10. Mark Commenting
    11. Dashboard Feedback
    12. Importing Data
    1. Overview and Enabling
    2. Email Option
    3. Scheduled Reports
    4. Fallback Image
    5. Watermark Text
    6. Powerpoint
    1. Curator Styles
    2. Homepage
    3. Titles and Toolbars
    4. Group Overrides
    5. Page Meta Titles (SEO)
    1. Managing Menus
    2. Menu Items
    3. Restrict Access
    4. Tagged Workbooks
    5. Site Switcher
    1. Pages Overview
    2. Looker Embedding
    3. Tiles
    4. Explorer
    5. Forms
    6. Blogs
    7. User Customized Metrics
    8. Manual Embeds (iFrame)
    9. SSRS Embedding
    10. YouTube Embedding
    1. Files
    1. Hidden Content
    2. Search
    3. Keywords
    4. Favorites
    5. Featuring Content
    6. Thumbnail Preview Images
    1. Loading Screens
    1. Error Pages
    2. Tutorials
    3. Notices
    8. Email Formatting
    1. Users and Groups Overview
    2. User Sync and Membership Sync Overview
    3. Reset User's Password
    4. Frontend Users
    5. Automatic License Provisioning
    6. Just-in-time (JIT) Provisioning
    7. Username Mapping
    8. Custom Attributes
    1. Frontend User Permissions
    2. Password Change
    3. Password Reset
    4. Password Expiration and Complexity
    5. Disabling Link-preview Security
    6. User Throttling
    1. Third Party Cookies
    1. Overview
    2. Password Reset
    1. System Notifications
    2. Data Manager Notifications
    1. Troubleshooting Load Times
    2. Cache Warming
    1. Updating License Key
    1. Web Accessibility
    1. System Upgrade
    2. Disable Curator Upgrades
    3. Offline Upgrades (Airgapped)
    4. Dependency Updates
    5. Troubleshooting Upgrades
    1. Importing and Exporting
    1. Curator Backup
    2. Taking a Manual Full Backup
    3. Manual Restoration of Curator Backup
    1. Updating Curator Logging
    2. Disk Speed Metrics
    3. Server Hardening Procedures
    4. Filesystem Permissions
    5. Linux: Cron Troubleshooting
    1. Curator API Overview
    2. Curator Integration Overview
    1. Integration
    2. Curator API
    3. Tableau API
    4. Content
    5. User API
    6. Authentication
    1. Scripts
    2. Commands
    3. Subscription Routing
        1. Menu Tuning
        2. Cache Warming

      Setup: Authentication

      Authentication Methods Overview

      When using Curator to embed content from other applications (e.g. Tableau, PowerBI) Curator relies on those systems to authorize a user to see and interact with content that is embedded in Curator.

      By default, Curator is set up to "pass through" this task to embedded content, and has no Authentication system enabled. However, Curator can utilize the authentication systems that your embedded content also relies on. This creates a seamless browsing experience wherein Curator shows/hides content based on the source-system's permissions (rather than managing them inside Curator). Curator does not have mechanisms to grant users access to content that they do not have access to within the source-system itself.

      By setting up Curator's Authentication Type to match your source-systems authentication, you can more seamlessly manage access to content in one location: in the source-system itself. However, if you would like to manage content in Curator that does not contain source-system content (e.g. pages), you can restrict content based on Groups (either those retrieved from SAML or Tableau Server) through the restrict-access settings on the Menu system.

      Changing Authentication Settings

      Curator can use multiple different methods to authenticate users to the frontend. Each method may require additional setup, so be sure to check out the For details on each option see the descriptions at the bottom of this page.

      To set the authentication method:

      1. Login to the backend of your Curator instance (e.g. http://curatorexample.com/backend).
      2. Navigate to the Settings > Security > Authentication Settings section from the left-hand menu.
      3. In the General tab, select the desired authentication type and click the "Save" button.

      Authentication Type Options

      First things first, if you have not enabled the Tableau Server REST API, be sure to do that. Without that enabled, Pass-Through (aka Security Disabled) will be the only available option.

      Pass-Through (Security Disabled) This turns off authentication to the frontend and makes all links and pages public. The user is still required to authenticate directly to the Tableau Server for any underlying views in a Dashboard which requires a login.

      Active Directory Users authenticate seamlessly with Microsoft Active Directory. See details on setting up Active Directory Users.

      SAML This allows user accounts to authenticate using your SAML Identity Provider (IdP). Follow these instructions to learn how to set up Curator to use SAML as your IdP.

      OAuth/OpenID This allows user accounts to authenticate using your OAuth provider.

      Tableau Server This allows user accounts to authenticate directly with a Tableau Server using their local Tableau Server username and password.

      Curator Users This allows users to be created and stored locally on the site. For Tableau Cloud customers you can use Curator as your SAML Host (IdP), in which case you would set up your Tableau Server to look at the portal for SAML authentication.