Skip to main contentIf your analytic infrastructure was built by several independent groups within your organization, it’s possible that the
username formats don’t match across the platforms. Authenticating to each platform can usually be solved with a single
sign-on solution, but the issue still exists for embedding these platforms. API’s that are used to verify user
information, permission to analytic content, group membership, etc. rely on local platform users and can’t leverage SSO
credentials. Curator solves this with a built-in platform username formatting.
How it Works
Curator’s username formatting feature will take the username received from your authentication source (SAML IdP, Tableau
Server local auth, ThoughtSpot local auth, etc.) and map it to another format based on the API call being made. For
instance, if Okta is returning the username as an email address but Tableau Server users use the prefixed domain format
the following will happen (assuming the username is InterWorks\Curator in Tableau Server):
- User logs into Curator via Okta using their Okta credentials.
- Okta returns the username as
curator@interworks.com
.
- Curator automatically re-formats the username to InterWorks\Curator in order to sync the Tableau Server user details.
- Navigate to the Curator Backend > Settings > Users > Username Formatting
- Turn on the “Enable Username Mapping” switch
- Specify the username format your authentication source is returning back to Curator using the “Curator Frontend
Username Format” field.
- Specify the username format for each Connection you’ve configured in Curator. You can use a different format per Connection.
The following are the supported username formats assuming the username is “Curator” and the domain is “InterWorks”:
- Username Only > Curator
- Username with Prefixed Domain > InterWorks\Curator
- User Email >
curator@interworks.com
Domain Formatting
In addition to mapping username formats for multiple platforms, you may also need to map the domains. For instance,
iw\Curator doesn’t match curator@interworks.com
in format or domain. To handle this situation, you can configure
domain mapping:
- Navigate to the Curator Backend > Settings > Users > Username Formatting
- Turn on the “Enable Domain Mapping” switch
- Use the “Domain Map” area to specify as many mappings as you need, specifically the following:
- Connection: The connection being mapped to from your Frontend User
- Frontend User Domain: The domain to find in the Frontend User name
- [Platform] User Domain: The replacement domain for the platform user name
Example
My SSO system is returning iw\Curator but my Tableau user is curator@interworks.com
. The following settings would
resolve this mismatch:
For the mismatch format
- Turn on “Enable Username Mapping” switch
- Choose “Username with Prefixed Domain” for the “Frontend User Username Format” field
- Choose “User Email” for the “Tableau Username Format”
For the mismatch domain
- Turn on “Enable Domain Mapping” switch
- Add a new item under “Domain Map”
- Choose “Tableau” for the “Connection” field
- Type “iw” for the “Frontend User Domain”
- Type “InterWorks” for the “Tableau User Domain”
- Save all the settings