SAML Single Sign-On (SSO) in Tableau Server (SP) | Magento – Tableau Server SSO Login

Overview

This guide will help you integrate Magento as a SAML 2.0 Identity Provider (IdP) and Tableau as a Service Provider (SP) using the miniOrange Magento SAML IDP (Identity Provider) Extension. Magento SAML IdP extenstion gives you the ability to use your Magento credentials to login into Tableau Server (SP). Here we will go through a step-by-step guide to configure SSO between Tableau Server as SP (Service Provider) and Magento as IDP (Identity Provider).

Download

Pricing Plans

Schedule a Meeting

Installation Steps

Using Composer
Manual Installation

Purchase the miniOrange SAML IDP Single Sign-On extension from magento marketplace.
Go to My profile -> My Purchases
Please ensure you are using correct access keys (My Profile - Access Keys)
Paste the access keys in your auth.json file inside your project
Use the below command to add the extension to your project.
```
"composer require {module_name}:{version}"
```
You can see the module name and list of versions in the selector below the extension module name.
Run the following commands on command prompt to enable the extension.

php bin/magento setup:upgrade

Download the miniOrange SAML IDP Single Sign-On extension.
Unzip all contents of the zip inside the MiniOrange/IDPSaml directory.

{Root Directory of Magento} app code MiniOrange IDPSaml

Run the following commands on command prompt to enable the extension

php bin/magento setup:upgrade

Prerequisites

To get the SP metadata details, log in to your Tableau Online Dashboard as Admin.
Go to Authentication in the Settings menu.

Select Enable an additional authentication method checkbox.
Select SAML >> Edit Connection.
Copy the Entity ID and ACS URL. You will require this while configuring the SSO in miniOrange Magento extension.

Steps to configure Tableau Server SAML Single Sign-on (SSO) Login into Magento 2

Configuring Magento as SAML Identity Provider (IdP):

In the miniOrange IDP (Identity Provider) extension, go to Applications tab and Click on Add Application button.

Search for Tableau in the choose application searchbox and select the application.

Enter the Application name under SP Name.

Now, enter the SP Entity ID or Issuer and ACS URL copied earlier and save the details.

Magento SAML IDP Copy entity ID and ACS URL

Configure Tableau as Service Provider:

Navigate to the Applications tab and click on Metadata settings for the Tableau application

Here, you can find the Identity Provider Metadata URL /XML Metadata or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate. You can also download the IdP Metadata XML file which will be used for Tableau Server configuration.

IDP Metadata URL SAML Endpoints - Magento SAML IDP SSO

You will now have 3 options to provide the IDP Metadata to Tableau server by downloading the XML Metadata, Metadata URL or providing the detials manually.
Option 1 - Download the XML Metadata.
Download the XML Metadata by clicking it on Download XML Metadata button.

Navigate to your Tableau server and upload the XML metadata file downloaded and click on the Apply button.

Option 2 - Provide the details manually to the Tableau Server.
Copy the metadata details according to the table below.

Magento-SAML-IDP-Select-Paste metadata detials

Tableau Server return URL	SAML Login URL / Passive Login URL
SAML Entity ID	IDP-EntityID / Issuer
SAML certificate and key files	Certificate

Navigate to your Tableau server and paste the metadata details.

Attribute Mapping *(This is a Premium Feature)

In the miniOrange Magento IDP extension, navigate to the Applications tab and click on Edit settings for the Tableau application.

Add the attribute name you want to send to your service provider and select the attribute from the dropdown menu.

Click on "+" button to add the attribute and save changes.

Magento as SAML IDP - add and save attribute mapping

You have successfully configured the SAML SSO between Tableau Server as SAML SP and Magento as SAML IDP.

Contents