Installation, identity stores, SSO and SSL
How a Windows Tableau Server 2022.3 install is laid out and configured: install and data paths, the gateway port, the permanent choice between a local and an Active Directory identity store, the SSO options each store allows (trusted tickets, SAML, Kerberos, OpenID Connect, SSPI automatic logon), external SSL, the single-machine baseline and silent installs.
2.1 Installation: 2.1.1 Understand installation steps and options: 2.1.1.1 Install Path, 2.1.1.2 Gateway port; 2.1.2 Understand Identity Store and SSO options: 2.1.2.1 External (Active Directory) vs. local, 2.1.2.2 Trusted Tickets, 2.1.2.3 SAML, 2.1.2.4 Kerberos and OpenID Connect; 2.1.3 Describe the impact of the automatic-login options; 2.1.4 Understand how to set up SSL; 2.1.5 Understand Tableau best practices for installing a single-machine environment; 2.1.6 Understand silent installs.
~8 min read · 15 practice questions
What the exam expects
- Predict where the program files and the data directory land for a default or custom install path, and change the gateway HTTP port after installation.
- Choose between a local and an external (Active Directory) identity store before the initial configuration is applied.
- Match a sign-in requirement to trusted tickets, server-wide or site-specific SAML, Kerberos, OpenID Connect or automatic logon (SSPI), and know which combinations are blocked.
- Describe the external SSL setup and the files it needs.
- Apply the single-machine baseline and the rules for silent and automated installs.
Key terms: identity store (where Tableau Server's users and groups are managed: local or external); gateway (the Apache process that receives every client request); trusted ticket (a short-lived string a trusted web server requests for a user); SSPI automatic logon (Windows sign-in reused for Tableau on an Active Directory server); external SSL (encryption of HTTP traffic between clients and the gateway).
Key facts
- Detail
- The data directory installs into the same path
- Detail
- 80 for HTTP (changeable), 443 for SSL (not changeable)
- Detail
- Cannot be changed after it is configured and applied
- Detail
- Must be redeemed within three minutes; views only
target_site- Detail
- The case-sensitive Site ID, required for a non-Default site
- Detail
- Local identity store only; server-wide SAML configured first
- Detail
- Requires a local identity store
- Detail
- Windows and Active Directory only; not with SAML, trusted authentication, a load balancer or a proxy
- Detail
- PEM-encoded X509
.crtplus its RSA or DSA private key
- Detail
- Server does not start; run
tsm start
- Detail
- Initial, limited, non-critical use; HA needs three nodes
Sources for this section (11)
- Before you install...help.tableau.com (opens in a new tab)
- Tableau Server Gateway Processhelp.tableau.com (opens in a new tab)
- Configure Initial Node Settingshelp.tableau.com (opens in a new tab)
- Trusted Authenticationhelp.tableau.com (opens in a new tab)
- Get a Ticket from Tableau Serverhelp.tableau.com (opens in a new tab)
- Configure Site-Specific SAMLhelp.tableau.com (opens in a new tab)
- Requirements for Using OpenID Connecthelp.tableau.com (opens in a new tab)
- Authenticationhelp.tableau.com (opens in a new tab)
- Configure External SSLhelp.tableau.com (opens in a new tab)
- Install Switches and Propertieshelp.tableau.com (opens in a new tab)
- Recommended Baseline Configurationshelp.tableau.com (opens in a new tab)
- Why can't someone who reads the repository reuse stored trusted tickets?
- Why does Tableau recommend sending trusted tickets only over SSL/TLS?
- When does Tableau Server answer a ticket request with -1?
- What license does
SilentInstaller.pyactivate when no product key is supplied?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Server Administrator pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 34 lessons of the Tableau Server Administrator guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (15 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both