1. Linux
    2. Windows
    3. IIS (Unavailable)
    1. Authentication Methods Overview
    2. Okta (SAML)
    3. OneLogin (SAML)
    4. Curator Users
    5. Azure AD (SAML)
    6. OneLogin (OIDC)
    7. Multifactor Authentication
    8. Signing SAML Login Requests
    9. Active Directory
    10. Windows LDAP (IIS) - DEPRECATED
    1. Windows SSL (IIS) - DEPRECATED
    2. Force SSL
    3. Linux SSL
    4. Windows SSL
    5. Basic HTTP Authentication
    1. High Availability
    1. Windows
    2. Linux
    1. Forward Proxy
    2. Reverse Proxy
    1. Getting Started
    2. Setting Up Your Portal
    3. Adding Your First Dashboard
    4. Creating Your First Page
    1. REST API Integration
    2. Tableau Cloud Setup
    3. Embed Authentication
    4. Trusted Tickets
    5. Alternative URL Routing
    6. Tableau Server Repository
    7. Tableau API Debugging
    8. API Connections Overview
    1. (Step 1) Azure App Setup
    2. (Step 2) Service Principal Setup
    3. (Step 3) Power BI Workspace Access
    4. (Step 4) Curator Connection
    5. Troubleshooting Power BI Access
    1. Integrating ThoughtSpot with Curator
    1. Replace Dashboard URLs
    2. Temporarily Disabling Connections
    1. Share Workbook
    2. Adding a Dashboard
    3. Tableau Worksheets and Stories
    4. Generating Titles
    5. Data Export
    6. Custom Views
    7. Email Subscriptions
    8. Download Workbook
    9. Pause and Resume Changes
    10. URL Action Overrides (Link Target)
    11. Dashboard Settings
    1. Adding a Pulse Metric
    1. Preloading Filters and Parameters
    2. Specify Filter Sheet
    3. Filters
    4. Parameters
    5. Hidden Sticky Filters and Parameters
    6. Apply Button
    7. Filter Categories
    8. Caching Filter and Parameter Options
    1. Updating Data Groups
    2. Sending Data to Webhooks
    3. Web Data Connector (WDC)
    4. Exporting Data
    5. Data Manager Basics
    6. Creating a Form
    7. Connecting to Data Manager
    8. User Commenting
    9. Field Calculations
    10. Mark Commenting
    11. Dashboard Feedback
    12. Importing Data
    1. Overview and Enabling
    2. Email Option
    3. Scheduled Reports
    4. Fallback Image
    5. Watermark Text
    6. Powerpoint
    1. Curator Styles
    2. Homepage
    3. Titles and Toolbars
    4. Group Overrides
    5. Page Meta Titles (SEO)
    1. Managing Menus
    2. Menu Items
    3. Restrict Access
    4. Tagged Workbooks
    5. Site Switcher
    1. Pages Overview
    2. Looker Embedding
    3. Tiles
    4. Explorer
    5. Forms
    6. Blogs
    7. User Customized Metrics
    8. Manual Embeds (iFrame)
    9. SSRS Embedding
    10. YouTube Embedding
    1. Files
    1. Hidden Content
    2. Search
    3. Keywords
    4. Favorites
    5. Featuring Content
    6. Thumbnail Preview Images
    1. Loading Screens
    1. Error Pages
    2. Tutorials
    3. Notices
    8. Email Formatting
    1. Users and Groups Overview
    2. User Sync and Membership Sync Overview
    3. Reset User's Password
    4. Frontend Users
    5. Automatic License Provisioning
    6. Just-in-time (JIT) Provisioning
    7. Username Mapping
    8. Custom Attributes
    1. Frontend User Permissions
    2. Password Change
    3. Password Reset
    4. Password Expiration and Complexity
    5. Disabling Link-preview Security
    6. User Throttling
    1. Third Party Cookies
    1. Overview
    2. Password Reset
    1. System Notifications
    2. Data Manager Notifications
    1. Troubleshooting Load Times
    2. Cache Warming
    1. Updating License Key
    1. Web Accessibility
    1. System Upgrade
    2. Disable Curator Upgrades
    3. Offline Upgrades (Airgapped)
    4. Dependency Updates
    5. Troubleshooting Upgrades
    1. Importing and Exporting
    1. Curator Backup
    2. Taking a Manual Full Backup
    3. Manual Restoration of Curator Backup
    1. Updating Curator Logging
    2. Disk Speed Metrics
    3. Server Hardening Procedures
    4. Filesystem Permissions
    5. Linux: Cron Troubleshooting
    1. Curator API Overview
    2. Curator Integration Overview
    1. Integration
    2. Curator API
    3. Tableau API
    4. Content
    5. User API
    6. Authentication
    1. Scripts
    2. Commands
    3. Subscription Routing
        1. Menu Tuning
        2. Cache Warming

      Setup: Authentication

      Okta - SAML

      Provisioning Users on Okta

      For provisioning users with Okta, you will need to have a user created in both Okta and Tableau Server - their username's must match (the "Application username format" step in #4 below).

      Once the user logs in, their username in Okta needs to match a username of a user on Tableau Server.

      Curator Installation

      If you have not installed Curator (e.g. Apache, MySQL, PHP, and dependencies) you can do this with the commands in the Installation documentation.

      Also ensure you have connected to your Tableau Server instance following the Tableau Server connections steps.

      Tableau Setup

      Tableau Cloud

      Tableau has excellent documentation on connecting Okta to Tableau Cloud. https://onlinehelp.tableau.com/current/online/en-us/saml_config_okta.htm

      Make sure to follow the additional setup steps in the Tableau Cloud documentation.

      If a Tableau login button appears where a Dashboard should be after configuring SAML, be sure to follow the steps to enable iFrame embedding in the following document: https://help.tableau.com/current/online/en-us/saml_config_okta.htm#optional-enable-iframe-embedding

      Tableau Server

      To ensure that after a user signs in to SAML via Curator they do not have to re-sign in to the embedded Tableau Server Dashboard (Note: this will only work in conjunction with changing iFrame settings on Okta in step #3 as well):

      On your Tableau Server run the command below:

      ```bash
tsm configuration set -k wgserver.saml.iframed_idp.enabled -v true
```

      Next, either run:

      ```bash
tsm pending-changes apply
tsm restart
```

      Or open TSM in your browser and click Pending Changes at the top of the page then click 'Apply Changes and Restart'.

      Enable iFrames for Tableau's Okta App

      In the Okta system, ensure you have turned ON iFrame embedding by going to "Settings->Customization". The Tableau Documentation has this marked as "optional": it is not optional for Curator installs unless you are satisfied with forcing your users log in twice to access Tableau content on Curator

      Okta App Setup

      Create a new Application. Navigate to Applications -> Create New App. Note: This will be in addition to the one you already setup for Tableau Cloud

      We recommend naming this app either "Curator" or your preferred name for your branded analytics site.

      When filling out the details for the application:

      • For the Single sign-on URL paste in the URL to the homepage of Curator
      • For Audience URI (SP Entity ID) put in the Curator URL without the trailing /, or http/https
      • Select Email (or the format that matches Tableau Server usernames) as the "Application username format"
      • Add an additional attribute of username with the value "user.email" (or the format that matches Tableau Server usernames)

      Curator Setup

      In the SP settings for Curator in Okta, navigate to the "Sign On" tab and click "Identity Provider metadata" to generate a XML metadata file. If this link isn't present you can scroll down and click the "View SAML setup instructions" button on the right-hand side of the screen. In the Curator backend settings, go to the Settings > Security > Authentication Settings tab. From the authentication list select "SAML". You can use the "Import SAML Metadata" button to import the XML file you generated from Okta. Alternatively, you can manually enter the information:

      • For the Entity ID put the "Audience URI (SP Entity ID)" you filled in before.
      • For the SignOn URL, put the "Identity Provider Single Sign-On URL" URL found in the setup section.
      • For the IdP ID, put the "Identity Provider Issuer" from the setup section.
      • For the SignOut URL, put the URL of the application /login/signout (i.e. https://mydomain.okta.com/login/signout)
      • Open the "SAML Advanced" section. For the Certificate, open the metadata XML file, copy the certificate text, and paste it in the field.

      Optional Setup

      You may want to select a few options to make the login process more streamlined. First, set the Curator application to "Auto-launch" in the "edit application" section on Okta.

      You may also wish to hide the Tableau Cloud icon from users. You can do this in the edit application area for the Tableau Cloud app. Under "App Settings", select "Do not display application icon to users".

      You can also select a custom sign-out page to point the user back to Curator so that they don't end up in a weird Okta loop. To do this, go to Settings->Customization->Signout Page. Make the signout page the URL of your Curator URL.