Set Up Trust Between Salesforce and Tableau Cloud

To create a semantic model from a PDS, you’ll first need to establish a trusted connection between your Salesforce org and Tableau Cloud site.

Available in: All editions supported by Data 360. See Data 360 edition availability.

User Permissions Needed
To set up trust between Salesforce and Tableau Cloud:	Data Cloud Architect permission set AND Semantic Models permission set AND Tableau Next license

User Permissions Needed

To set up trust between Salesforce and Tableau Cloud:

Data Cloud Architect permission set

AND

Semantic Models permission set

AND

Tableau Next license

This steps below must be completed by both a Salesforce Admin and a Tableau Admin.

Add Tableau User Ids to Salesforce Users

Note The semantic model will use this user identity to query the PDS, including respecting any row-level security in the PDS.

To set up trust between Salesforce and Tableau Cloud, as a Salesforce Admin, click Setup to open the Salesforce Setup page.
Use search to find and open Tableau Embedding.
Use the Select Tableau User Identity field parameter to specify which Salesforce user field corresponds to the Tableau user identity.
If the Salesforce user’s email matches the Tableau user’s email, set Select Tableau User Identity field to Email.
If the emails are different, you’ll need to create a custom field on the User object in Salesforce to store the Tableau user identifier. To create the custom field, in Salesforce Setup, go to the Object Manager tab, search for and open the User object. Then click Fields and Relationships and click New to create the field. After the field is created, return to Tableau Embedding and select it from the Select Tableau User Identity field dropdown.

Copy the following two parameters from Tableau Embedding: Issuer URL and JWKS URI. These values are required to establish a connection with your Tableau Cloud site.
Now, as a Tableau Admin, log in to your Tableau Site, then go to Settings > Connected Apps and click New Connected App. Make sure to select OAuth 2.0 Trust, as it’s the only option that allows specifying the JWKS URI and Issuer URL required for integration with Salesforce.
Enter a name for the connected app.
Copy the Issuer URL and JWKS URI from Salesforce and paste them into the connected app form.
Select the checkbox to enable the connected app.
Click Create to complete the setup.

Once trust is configured, you can create a new model in the Data 360 Semantic Layer by connecting to the appropriate PDS.

Did this article solve your issue?

Let us know so we can improve!