Microsoft Entra application proxy and Tableau

Microsoft Entra application proxy and Tableau have partnered to ensure you are easily able to use Application Proxy to provide remote access for your Tableau deployment. This article explains how to configure this scenario.

Prerequisites

The scenario in this article assumes that you have:

• Tableau configured.

• An Application Proxy connector installed.

Enabling Application Proxy for Tableau

Application Proxy supports the OAuth 2.0 Grant Flow, which is required for Tableau to work properly. This means that there are no longer any special steps required to enable this application, other than configuring it by following the publishing steps below.

Publish your applications in Azure

Tip

Steps in this article may vary slightly based on the portal you start from.

To publish Tableau, you need to publish an application in the Microsoft Entra admin center.

For:

• Detailed instructions of steps 1-8, see Publish applications using Microsoft Entra application proxy.
• Information about how to find Tableau values for the App Proxy fields, please see the Tableau documentation.

To publish your app:

1. Sign in to the Microsoft Entra admin center as at least a Application Administrator.

2. Browse to Identity > Applications > Enterprise applications.

3. Select New application at the top of the blade.

4. Select On-premises application.

5. Fill out the required fields with information about your new app. Use the following guidance for the settings:

   • Internal URL: This application should have an internal URL that is the Tableau URL itself. For example, https://adventure-works.tableau.com.

   • Pre-authentication method: Microsoft Entra ID (recommended but not required).

6. Select Add at the top of the blade. Your application is added, and the quick start menu opens.

7. In the quick start menu, select Assign a user for testing, and add at least one user to the application. Make sure this test account has access to the on-premises application.

8. Select Assign to save the test user assignment.

9. (Optional) On the app management page, select Single sign-on. Choose Integrated Windows Authentication from the drop-down menu, and fill out the required fields based on your Tableau configuration. Select Save.

Testing

Your application is now ready to test. Access the external URL you used to publish Tableau, and log in as a user assigned to both applications.

Next steps

For more information about Microsoft Entra application proxy, see How to provide secure remote access to on-premises applications.