# Webhooks, refresh APIs, extensions and embedded authentication

*Tableau Architect Study Guide · Monitor and Maintain a Tableau Deployment · Last updated November 13, 2026 · https://www.certifyforce.com/study-guide/tableau-architect/monitor-and-maintain-a-tableau-deployment/webhooks-refresh-apis-extensions-and-embedded-authentication*

Automate content work with webhooks, tabcmd refreshextracts, REST refresh and job methods and Hyper update requests; approve dashboard extensions and web data connectors; and make trusted tickets and direct-trust connected apps work in a custom embedded portal.

- Certification: Salesforce Tableau Architect
- Exam section: Monitor and Maintain a Tableau Deployment
- Study guide: https://www.certifyforce.com/study-guide/tableau-architect

**Official exam objective:**

> 3.6 Manage server extensions: 3.6.1 Schedule content automation tasks by using webhooks, tabcmd, REST, or Hyper APIs; 3.6.2 Implement and configure dashboard extensions and web data connectors; 3.6.3 Configure trusted tickets and connected apps for a custom embedded solution.

## What the exam expects

- Schedule and chain content automation with webhooks, tabcmd, the REST API and the Hyper update API, including how a script waits for a refresh.
- Implement and configure dashboard extensions (safe list, block list, data access, prompts) and web data connectors (safe lists, refresh).
- Make trusted tickets work for a custom embedded portal and troubleshoot failed tickets.
- Build and maintain the JWT for a direct-trust connected app, including secret rotation.

Key terms: **webhook** (an HTTPS POST with a JSON payload sent to your URL when a subscribed event occurs); **live-to-Hyper data source** (a published data source whose Hyper data can be changed in place by REST requests); **safe list** (site list of approved extension URLs, or the TSM list of approved WDCs); **trusted ticket** (a one-time string a trusted web server requests for a user); **connected app** (a site-level trust between Tableau Server and an external application, proved with a signed JWT).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Webhook creator | Site administrator; HTTPS URL with valid certificate | [Webhooks start](https://help.tableau.com/current/developer/webhooks/en-us/docs/webhooks-get-started.html) |
| Webhook auto-disable | After four delivery failures; owner emailed | [Webhook events](https://help.tableau.com/current/developer/webhooks/en-us/docs/webhooks-events-payload.html) |
| `refreshextracts` name | Name on the server, not the file name | [tabcmd](https://help.tableau.com/current/server/en-us/tabcmd_cmd.htm) |
| Run Extract Refresh Task | Fails if the task is queued or in progress | [Jobs and tasks](https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_jobs_tasks_and_schedules.htm) |
| `RequestID` | Duplicates within 24 hours ignored | [Hyper update](https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_how_to_update_data_to_hyper.htm) |
| Hyper update size | 100 MB default since 2022.1 | [Hyper update](https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_how_to_update_data_to_hyper.htm) |
| Extension protocol | HTTPS only, except `http://localhost` | [Extensions on Server](https://help.tableau.com/current/server/en-us/dashboard_extensions_server.htm) |
| Safe list default | Summary data only; prompts shown | [Extensions on Server](https://help.tableau.com/current/server/en-us/dashboard_extensions_server.htm) |
| WDC refresh with sign-in | Credentials embedded; republish to change | [WDCs in Server](https://help.tableau.com/current/server/en-us/datasource_wdc.htm) |
| Ticket redemption | Within three minutes | [Trusted authentication](https://help.tableau.com/current/server/en-us/trusted_auth.htm) |
| `wgserver.unrestricted_ticket` | Default false: views only | [tsm configuration set](https://help.tableau.com/current/server/en-us/cli_configuration-set_tsm.htm) |
| JWT validity cap | 10 minutes by default | [tsm configuration set](https://help.tableau.com/current/server/en-us/cli_configuration-set_tsm.htm) |

## Check yourself

- When must a browser redeem a trusted ticket?
- When do both REST Run Extract Refresh Task and tabcmd refreshextracts fail regardless of the queue?
- Which browser setting must allow trusted authentication with embedded views?
- How long can a script keep using a tabcmd session token?

## Sources

- [Webhooks Events and Payloads](https://help.tableau.com/current/developer/webhooks/en-us/docs/webhooks-events-payload.html)
- [Get Started with Tableau Webhooks](https://help.tableau.com/current/developer/webhooks/en-us/docs/webhooks-get-started.html)
- [tabcmd Commands](https://help.tableau.com/current/server/en-us/tabcmd_cmd.htm)
- [Jobs, Tasks, and Schedules Methods](https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_jobs_tasks_and_schedules.htm)
- [Update Data in Published Live-to-Hyper Data Sources](https://help.tableau.com/current/api/rest_api/en-us/REST/rest_api_how_to_update_data_to_hyper.htm)
- [Manage Dashboard and Viz Extensions in Tableau Server](https://help.tableau.com/current/server/en-us/dashboard_extensions_server.htm)
- [Web Data Connectors in Tableau Server](https://help.tableau.com/current/server/en-us/datasource_wdc.htm)
- [Trusted Authentication](https://help.tableau.com/current/server/en-us/trusted_auth.htm)
- [Ticket Value of -1 Returned from Tableau Server](https://help.tableau.com/current/server/en-us/trusted_auth_trouble_1return.htm)
- [Add Trusted IP Addresses or Host Names to Tableau Server](https://help.tableau.com/current/server/en-us/trusted_auth_trustIP.htm)
- [Configure Connected Apps with Direct Trust](https://help.tableau.com/current/server/en-us/connected_apps_direct.htm)
- [tsm configuration set Options](https://help.tableau.com/current/server/en-us/cli_configuration-set_tsm.htm)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 20 linked practice questions, and unlimited timed mock exams are included with the Tableau Architect pack (USD $19): https://www.certifyforce.com/practice-exams