If you have configured authentication at the proxy server gateway, then your proxy server must respond to Tableau Mobile HTTP requests with a HTTP 302 response. The 302 must include a redirect to the identity provider login page. This wiki page describes two scenarios:
- Generic authentication scenario
- Initial configuration
The following diagram shows a typical authentication sequence.
1. Initial URL: example.com/vizportal/api/web/v1/getFavorites
2. Reverse proxy sends back 302 redirect to login page (idp.ini/signin)
3. Mobile client URL to idp.ini/signin
4. IdP responds with sign-in page
5. Client sends credentials to IdP
6. IdP sends 302 back to proxy and includes authentication token
7. Mobile client sends request to proxy server with the authentication token
8. Proxy sends 302 redirect to the initial URL (example.com/vizportal/api/web/v1/getFavorites)
9 Mobile client connects to Tableau Server
10. Tableau Server sends a response based on the initial URL. In this case, getFavorites returns a list of the user's workbooks and worksheets.
Initial configuration
The following diagram shows the first authentication request that is made by the Tableau Mobile app. Refer to this diagram to troubleshoot initial configuration issues.
1. Initial URL: example.com/manual/auth
2. Reverse proxy sends back 302 redirect to login page (idp.ini/signin)
3. Mobile client URL to idp.ini/signin
4. IdP responds with sign-in page
5. Client sends credentials to IdP
6. IdP sends 302 back to proxy and includes authentication token
7. Mobile client sends request to proxy server with the authentication token
8. Proxy sends 302 redirect to example.com/manual/auth
9 Mobile client connects to Tableau Server at example.com/manual/auth
10. Tableau Server returns auth.xml to client
11. Mobile client signs in to Tableau Server based on auth.xml info
Hi,
I have a Tableau Server that located behind a proxy that has IdP based authentication,
When not authenticated, the proxy response with 302 HTTP response and redirect the user to the IdP login page (same as the sequence presented above).
I'm trying to access the the server using the mobile application for Android and getting the error: "Cannot connect to this server: contact your administrator..."
When trying the mobile application for iOS with the same server, I'm redirected successfully to the IdP login page and everything works fine.
Is the Proxy Authentication Sequence supported in the Android app?
Best,
John.
