Tableau

500 views
Skip to first unread message

Andrew Alien

unread,
Jun 5, 2015, 9:48:14 AM6/5/15
to simple...@googlegroups.com
I would like configure SimpleSAMLphp with Tableau.

Tableau require to make authorization via "emailAddress" attribute.

I can successfully logging in using created an account as an email(example: te...@test.com) to the SimpleSAMLphp. While Tableau server wont me authorize for the reason: Incoming SAML message has no valid value for EmailAddress attribute

So guess I need to make some extra configuration on SimpleSAMLphp to send attribute EmailAddress.
At the moment I'm using simple Auth-example module.

Any suggestion?

Andrew Alien

unread,
Jun 5, 2015, 9:53:07 AM6/5/15
to simple...@googlegroups.com

In same time I was successful configured Tableau with https://idp.ssocircle.com/sso/UI/Login using this tutorial: http://tableaulove.tumblr.com/post/72694988761/test-saml-with-tableau-server-on-the-cheap

Where is described that I have use emailAddress as assertion.

Peter Schober

unread,
Jun 5, 2015, 10:31:37 AM6/5/15
to simple...@googlegroups.com
* Andrew Alien <wer...@gmail.com> [2015-06-05 15:53]:
> http://tableaulove.tumblr.com/post/72694988761/test-saml-with-tableau-server-on-the-cheap
>
> Where is described that I have use *emailAddress* as assertion.

Sorry, that isn't sufficiently precise what the formal attribute name
on the wire should be, and in what nameFormat.

http://onlinehelp.tableau.com/current/server/en-us/config_saml.htm
is also worthless in this regard, *but* they also have this:

http://onlinehelp.tableau.com/current/server/en-us/saml_requ.htm
which says you have to send the username in a custom SAML attribute
called "username" with basic name format.
-peter

Peter Schober

unread,
Jun 5, 2015, 10:49:11 AM6/5/15
to simple...@googlegroups.com
* Andrew Alien <wer...@gmail.com> [2015-06-05 15:59]:
> *Incoming SAML message has no valid value for EmailAddress
> attribute*
> So guess I need to make some extra configuration on SimpleSAMLphp to
> send attribute *EmailAddress. *At the moment I'm using simple
> Auth-example module.

According to their documentation it needs to be an attribute called
"username", which you can add via the exampleauth module.
For example-static it would be:

'example-static' => array(
'exampleauth:Static',
'username' => array('your-username'),
),

always adding a "username" attribute with the value "your-username".
Likewise for example-userpass:

'example-userpass' => array(
'exampleauth:UserPass',
'user:password' => array(
'username' => array('your-username'),
),
),

Which adds the same attribute to the user "user" with the password
"password".
-peter

Andrew Alien

unread,
Jun 6, 2015, 10:34:31 AM6/6/15
to simple...@googlegroups.com
Peter, thanks a lot. My problem is that attribute name is case sensitive.
So finally I have configured
Reply all
Reply to author
Forward
0 new messages