Deploy and Enjoy: Tableau Mobile at Enterprise Scale

Transcription

1

2 # D e p l o y E n j o y M o b i l e Deploy and Enjoy: Tableau Mobile at Enterprise Scale Paul Cardon Staff Software Engineer Tableau Sham Dorairaj Senior Software Engineer Tableau

3 # D e p l o y E n j o y M o b i l e Sham Dorairaj

4 # D e p l o y E n j o y M o b i l e Paul Cardon

5 # D e p l o y E n j o y M o b i l e Tableau Mobile Team W e a r e b u t t w o o f m a n y : Test User Experience Support Development Documentation

6 You! Tableau Champion Tableau Server Administrator IT/Operations IT Security You want to enable your Tableau Server users to enjoy Tableau on their mobile devices

7 Give our enterprise customers guidance on how to deploy Tableau Mobile in their network environments. Welcome and Introduction Signing into Tableau Server Connect > Trust > Authenticate Mobile Device Management (MDM) Customize Tableau Mobile Lagniappes

8 Tableau overview Tableau Mobile is the fastest & most delightful way to stay on top of your data

9 Tableau Mobile

10

11 Managing Mobile is Different Mobile Platforms are unique: Operating Systems Apps & App Stores Different Security Concerns Bring-Your-Own-Device (BYOD) is common Device is personal

12 Sign into Tableau Server

13 Signing into Tableau Server 1. Connect 2. Trust 3. Authenticate

14 Step 1: Connect

15 Connect: Private Network (aka Intranet) Private Network

16 Connect: Reverse Proxy Private Network

17 Connect: Virtual Private Network (VPN) Private Network

18 Connect: The Cloud

19 Connect Work with your Networking Team about which solution makes sense for your company

20 Signing into Tableau Server 1. Connect 2. Trust 3. Authenticate

21 Step 2: Trust A Philosophical Argument?

22

23 When you die, if you get a choice between going to regular heaven or pie heaven, choose pie heaven. It might be a trick, but if it's not, mmmmmmmm, boy. Jack Handey

24 When you choose your data transfer protocol, if you get a choice between an insecure protocol and a secure protocol, choose the secure protocol.

25 It won t be a trick, so, mmmmmmmm, boy. Paul Cardon

26 Trust: Why use HTTPS? S = Secure. SSL and TLS are secure protocols that enable HTTPS. HTTPS ensures you are talking to the correct server. HTTPS prevents eavesdropping. Apps in the ios app store have to provide justification for supporting HTTP. Chrome browsers mark all HTTP based sites and traffic as insecure.

27 Trust: SSL Certificates Certificate Authority A Certificate Authority B

28 Trust: SSL Certificates Certificate Authority A Certificate Authority B Server 1 Signed by A

29 Trust: SSL Certificates Certificate Authority A Certificate Authority B Server 1 Signed by A

30 Trust: SSL Certificates Certificate Authority A Certificate Authority B

31 Trust: SSL Certificates Certificate Authority A Certificate Authority B Server 2 Signed by B

32 Trust: SSL Certificates Certificate Authority A Certificate Authority B Server 2 Signed by B

33 Trust: SSL Certificates Certificate Authority A Certificate Authority B

34 Trust: SSL Certificates Certificate Authority A Certificate Authority B Server MyTableau Signed by Company

35 Trust: SSL Certificates Certificate Authority A Certificate Authority B Server MyTableau Signed by Company

36 Trust: SSL Certificates Certificate Authority A Certificate Authority B

37 Trust: SSL Certificates Certificate Authority A Certificate Authority B Company Certificate Authority

38 Trust: SSL Certificates Certificate Authority A Certificate Authority B Company Certificate Authority Server MyTableau Signed by Company

39 Trust: SSL Certificates Certificate Authority A Certificate Authority B Company Certificate Authority Server MyTableau Signed by Company

40 Signing into Tableau Server 1. Connect 2. Trust 3. Authenticate

41 Authentication

42 Why Authentication? workgroup session id Authentication types supported by Tableau Mobile: Local Auth (User-Password) SAML Kerberos

43 Authentication Server Info : external_version : authentication : type : user-password

44 Local Authentication

45 Local Authentication

46 SAML Authentication Client Security Assertion Markup Language Service Provider Identity Provider

47 SAML Authentication Tableau Mobile Security Assertion Markup Language Service Provider Identity Provider

48 SAML Authentication Tableau Mobile Security Assertion Markup Language Tableau Server Identity Provider

49 SAML Authentication in a Webview

50 SAML Authentication in a Webview

51 Kerberos Supports: Single Sign On for multiple services Long lived sessions with Ticket Granting Tickets (TGT) Tableau requirements: Active Directory Profile installed on the mobile device: User principal name Realm (your active directory domain) If Kerberos fails, fall back can be configured.

52 Kerberos

53 Kerberos User certificate decodes the ticket User never types credentials!

54 Signed In!

55 Signing into Tableau Server 1. Connect 2. Trust 3. Authenticate

56 Users IT I don t want to sign in ever again! I want my users to be safe and renew their sessions often!

57 Remembering Credentials Tableau sessions expire after 4 hours of no use and you may need to enter credentials again It Depends User Password: If Keep Me Signed In is enabled, No SAML: Yes Kerberos: Only when Ticket Granting Ticket renewal is needed

58 Connected Clients to the Rescue! Tableau Mobile for Tableau Online only (ios, Android)

59 Identify Your Setup And Deploy To Users With MDM

60 Mobile Device Management

61 Mobile Device Management (MDM) Secure Configure Distribute Control

62 MDM: Secure Devices Configure VPN Entire device or per-app Secure

63 MDM: Configure Devices Install SSL certificates Install Kerberos certificates Configure Apple Device Enrollment Program (DEP) Configure

64 MDM: Apps Can push apps to devices All your users could run the same version of Tableau Mobile Control which groups of people get which apps Distribute

65 MDM: Control Devices Require device unlock passcode Disable camera, screen capture, etc. Specify the apps that can use cellular data Remotely wipe device Control

66 MDM: Systems AppConfig(iOS Only) Compatible with: SDK Integration(iOS Only): VMWare AirWatch MobileIron Citrix XenMobile Microsoft Intune Pro Tip from Tableau DevIT: your MDM vendor can help

67 Customize Tableau Mobile

68 Customize Tableau Mobile AppConfig Industry standard, more info at appconfig.org Publicly available app delivered with a special XML file containing key-value pairs On startup, the app checks for these key-value pairs. If the app finds them, it uses them.

69 Customize Tableau Mobile Reduce friction for users to sign in Thanks to MDM: Experience can be tailored to different groups of users

70 Customize Tableau Mobile Tableau Mobile AppConfig Key-Value Pairs Key Value Type Example Value AppServiceHosts string tableau.example.com, tableau-sales.example.com AppServiceLabels string Main, Sales CustomHostsTitle string Our Company Servers RemoveTableauOnlineButt on boolean true HideServerNameField boolean true RestrictUsername boolean true UserName string janedoe Documentation available online

71 Customize Tableau Mobile

72 Customize Tableau Mobile AppServiceHosts = tableau.example.com, tableausales.example.com

73 Customize Tableau Mobile AppServiceHosts = tableau.example.com, tableausales.example.com AppServiceLabels = Main, Sales CustomHostsTitle = Our Company Servers

74 Customize Tableau Mobile AppServiceHosts = tableau.example.com, tableausales.example.com AppServiceLabels = Main, Sales CustomHostsTitle = Our Company Servers HideServerNameField= true RemoveTableauOnlineButton = true

75 Lagniappes

76 Tableau Data stored on your mobile device Favorites cached on-device, viewable without a network connection At regular intervals the app requests fresh versions of these offline favorites Favorites are deleted on Sign Out or app removal Configurable per site, under Offline Favorites

77 Configure Offline Favorites

78 Mobile App Bootstrap Want to build your own custom mobile app? Consider starting here Separate Objective-C and React Native versions Objective-C library for Connected Clients Was covered in depth in a separate session Mobile app bootstrap Custom mobile apps with embedded Tableau visualizations Let us know if you re developing custom mobile apps!

79 How We Troubleshoot: Certificates SSL Detective and Certificate Inspector ios apps for on-device SSL certificate verification

80 How We Troubleshoot: General Settings Send Support Logs Increases Tableau Mobile logging level Shaking the device generates a log which can be shared with Tableau Support

81 Further Reading Tableau & Mobile Security white paper Tableau Mobile Deployment Guide Customize Tableau Mobile Mobile App Bootstrap code

82 U P C O M I N G S E S S I O N S Tableau Mobile Rising You CAN take it with you Wednesday Oct 24 th 3:30 PM 4:30 PM Tableau Labs Self Service Kiosk Data Village Schedule in the TC18 mobile app

83 PA S T S E S S I O N S Mobile app bootstrap Custom mobile apps with embedded Tableau visualizations On the road again Bring dashboards mobile with Device Designer Your journey to amazing mobile dashboards

84 PA S T S E S S I O N S Powering Boeing s second century with actionable insights Catering to customers at DEG Creating painless, customized mobile reporting

85 Q & A Give our enterprise customers guidance on how to deploy Tableau Mobile in their network environments. Welcome and Introduction Signing into Tableau Server Connect > Trust > Authenticate Mobile Device Management (MDM) Customize Tableau Mobile Lagniappes

86 Please complete the session survey from the My Evaluations menu in your TC18 app

87 #TC18 Thank you! Paul Cardon

88