Tableau SSO integration

[Klingenstein, Nate]

Pedro,

We have performed the integration and I would imagine it is related to the copying and pasting of stuff, including certificates, that the GUI makes you do, or a flag in their metadata as loaded by your IdP indicating their requests are supposed to be signed but they're not sending them signed, or...

I remember I had to do something to the metadata it generated, but I no longer have administrative access to the server so I can't generate fresh metadata out of it.

There were several harrowing aspects(product placement SAP HANA I'm lookin' at you), but that isn't one that stood out.

Take care,
Nate.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of privas
Sent: Wednesday, July 26, 2017 10:58 AM
To: users at shibboleth.net
Subject: Tableau SSO integration

Hi all,

I'm wondering if anyone has configured Tableau? I've followed their instructions
<http://onlinehelp.tableau.com/v10.3/server/en-us/config_saml.htm>   but I'm
getting an error in the Shibboleth logs:

2017-07-26 11:51:17,522 - ERROR
[org.opensaml.security.x509.impl.BasicX509CredentialNameEvaluator:300] - Credential failed name check:
[subjectName='CN=tableau-test.csuci.edu,OU=Academic and Information Technology,O=California State University\, Channel Islands,STREET=One University Drive,L=Camarillo,ST=CA,2.5.4.17=#13053933303132,C=US']
2017-07-26 11:51:17,525 - WARN
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202] - Profile Action WebFlowMessageHandlerAdaptor: Exception handling message
org.opensaml.messaging.handler.MessageHandlerException: Validation of protocol message signature failed


I've been reading previous posts which mentions the strong possibility of they key in the SP's metadata is wrong. According to the instructions, Tableau requires a PEM-encoded x509 certificate and a key without a passphrase. Tableau will then use both to create the metadata. I created the certificate request and key with openssl and got it signed by incommon and once applied Tableau doesn't complain. I'm not sure what I could be doing wrong.

Thank you for your time.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Tableau-SSO-integration-tp7634609.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net