Deploy Tableau Server37% of the exam
Mutual SSL, trusted tickets, connected apps and LDAP
Configure and troubleshoot the certificate, ticket, token and directory mechanisms of Tableau Server: mutual SSL, trusted authentication, direct-trust and OAuth 2.0 trust connected apps, and an LDAP identity store with an encrypted channel.
2.2 Configure and troubleshoot supported authentication methods: 2.2.1 Configure and troubleshoot SAML; 2.2.2 Configure and troubleshoot Kerberos; 2.2.3 Configure and troubleshoot OpenID Connect; 2.2.4 Configure and troubleshoot Mutual SSL; 2.2.5 Configure and troubleshoot trusted authentication; 2.2.6 Configure and troubleshoot Connected App authentication; 2.2.7 Configure and troubleshoot LDAP; 2.2.8 Configure and troubleshoot Azure Active Directory; 2.2.9 Identify dependencies between authentication methods and Tableau environments, including Tableau Cloud.
~7 min read · 11 practice questions
What the exam expects
- Configure mutual SSL on top of external SSL, choose the certificate username mapping and predict fallback behavior for browsers and REST clients.
- Configure trusted authentication: trusted hosts, the ticket request, client IP matching and its network requirements.
- Configure direct-trust and OAuth 2.0 trust connected apps, including embedded authoring, project scope and site-level external authorization servers.
- Configure an LDAP identity store at setup, encrypt its simple bind and change its settings after initialization.
- SAML, Kerberos, OpenID Connect, Microsoft Entra ID (formerly Azure Active Directory) and the Server-versus-Cloud method dependencies are taught in SAML, Kerberos, OpenID Connect and Entra ID sign-in.
Key terms: mutual SSL (client and server both present certificates, and the server signs the user in from the client certificate); trusted ticket (one-time string Tableau Server issues to a trusted web server for a user); connected app (site-level trust between Tableau and an external application, verified with a JSON Web Token, JWT); EAS (external authorization server, usually an IdP, used by OAuth 2.0 trust); simple bind (LDAP session opened with a username and password).
Key facts
Mutual SSL prerequisite
- Detail
- External SSL configured first
Username mapping
- Detail
- Local: UPN; AD: LDAP lookup;
-m cnuses common name
Fallback disabled
- Detail
- Browsers need a certificate; REST username and password still accepted
Ticket lifetime
- Detail
- Redeem within three minutes; failure returns -1
-th- Detail
- Replaces the full trusted-host list
client_ip- Detail
- Browser computer's address, with extended checking enabled
Address family
- Detail
- Trusted authentication supports IPv4 only
Embedded authoring
- Detail
tableau:views:embed_authoringinscp, existing permissions apply
Multiple projects
- Detail
- REST API only, from 2024.2
Site-level EAS
- Detail
- From 2024.2; connected apps enabled in TSM first
LDAP bind username
- Detail
- Distinguished name with query permission
LDAP certificate in a cluster
- Detail
- Copied manually to each Application Server node
Sources for this section (8)
- Mutual SSLhelp.tableau.com (opens in a new tab)
- Trusted Authenticationhelp.tableau.com (opens in a new tab)
- Trusted hostshelp.tableau.com (opens in a new tab)
- Get a tickethelp.tableau.com (opens in a new tab)
- Direct trusthelp.tableau.com (opens in a new tab)
- OAuth 2.0 trusthelp.tableau.com (opens in a new tab)
- LDAP referencehelp.tableau.com (opens in a new tab)
- Encrypted LDAPhelp.tableau.com (opens in a new tab)
- Why does Tableau recommend deploying trusted tickets only over SSL/TLS or another encrypted layer?
- When the external application's clock is not set to UTC, what happens to its connected-app tokens?
- What range of trusted ticket token lengths does Tableau Server accept, and what is the default?
- When must the encrypted channel for LDAP simple bind be configured?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 18 lessons of the Tableau Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (11 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both