Tableau，Pingfederate和AWS IAM身份中心：一个单一的交响曲

使用Tableau，Pingfederate和AWS IAM身份中心解锁无缝数据访问。本指南简化了安全数据分析的单登录。

Ever wished accessing your Amazon Redshift data in Tableau was as smooth as your favorite jazz tune? With the dynamic trio of Tableau, PingFederate, and AWS IAM Identity Center, it's not just a dream—it's a reality. Let's dive into how these technologies harmonize to simplify single sign-on (SSO) and secure your data analytics.

曾经希望在Tableau访问您的Amazon Redshift数据和您最喜欢的爵士音乐一样流畅吗？有了Tableau，Pingfederate和AWS IAM身份中心的动态三人组，这不仅是一个梦，而且是现实。让我们深入了解这些技术如何协调以简化单个登录（SSO）并保护您的数据分析。

The Power Trio: Tableau, PingFederate, and AWS IAM Identity Center

Power Trio：Tableau，Pingfederate和AWS IAM身份中心

This blog post explores the setup of single sign-on from Tableau Desktop to Amazon Redshift, leveraging the integration with IAM Identity Center and PingFederate as the identity provider (IdP) with an LDAP based data store, AWS Directory Service for Microsoft Active Directory.

这篇博客文章探讨了从Tableau桌面到Amazon Redshift的单个登录设置，利用与IAM身份中心的集成，并使用基于LDAP的数据存储，AWS Directory Service，用于Microsoft Active Directory Directory。

Key Insights and Implementation

关键见解和实施

The core idea is to enable federated user authentication. User identities managed in PingFederate are trusted and propagated to Amazon Redshift via AWS IAM Identity Center. This eliminates the need for managing separate database credentials within Tableau, streamlining access and enhancing security.

核心想法是启用联合用户身份验证。 Pingfederate管理的用户身份通过​​AWS IAM身份中心信任并传播到Amazon Redshift。这消除了在Tableau内部管理单独的数据库凭据的需求，从而简化了访问并增强安全性。

Setting Up the Stage: SAML and SCIM

设置舞台：SAML和SICIM

The integration begins with configuring SAML and SCIM between PingFederate and IAM Identity Center. PingFederate connects to IAM Identity Center using SAML. The users and groups in PingFederate are synced to IAM Identity Center using an open standard SCIM.

集成始于在Pingfederate和IAM身份中心之间配置SAML和SCIM。 Pingfederate使用SAML连接到IAM身份中心。 Pingfederate中的用户和组使用开放的标准SCIM同步到IAM身份中心。

Token Management: The Key to Seamless Access

令牌管理：无缝访问的关键

To enable single sign-on to Amazon Redshift from outside of AWS using a third-party client like Tableau, you set up a trusted token issuer token exchange using OIDC standard.

要使用Tableau等第三方客户端从AWS外部向Amazon Redshift启用单次登录，您可以使用OIDC标准设置一个值得信赖的令牌发行人令牌交换。

Token mapping in PingFederate allows mapping attributes to OAuth access tokens and OpenID Connect ID (OIDC) tokens.

Pingfederate中的令牌映射允许将属性映射到OAuth访问令牌和OpenID Connect ID（OIDC）令牌。

Tableau Configuration: Making the Connection

Tableau配置：建立连接

Tableau needs to be configured to trust the tokens issued by PingFederate through IAM Identity Center. This involves setting up OAuth configurations within Tableau Desktop, Server, or Cloud, pointing them to the trusted token issuer.

需要配置Tableau，以信任Pingfederate通过IAM身份中心发行的令牌。这涉及在Tableau桌面，服务器或云中设置OAuth配置，将其指向受信任的令牌发行人。

Note: Currently this integration is not supported in macOS because the Amazon Redshift ODBC 2.X Driver is not supported yet for MAC.

注意：目前，MACOS不支持此集成，因为Amazon Redshift ODBC 2.x驱动程序尚未支持Mac。

My Two Cents: Why This Matters

我的两分钱：为什么这很重要

In my experience, simplifying user access while maintaining robust security is a constant balancing act. The integration of Tableau, PingFederate, and AWS IAM Identity Center offers a elegant solution. By centralizing identity management and leveraging trusted token exchange, organizations can significantly reduce administrative overhead and improve the overall user experience. The use of open standards like SAML, SCIM, and OIDC ensures interoperability and reduces vendor lock-in.

以我的经验，在保持稳健安全性的同时简化了用户访问是一种不断的平衡行为。 Tableau，Pingfederate和AWS IAM身份中心的整合提供了优雅的解决方案。通过集中身份管理并利用受信任的令牌交换，组织可以大大减少管理开销并改善整体用户体验。使用SAML，SCIM和OIDC之类的开放标准可确保互操作性并减少供应商的锁定性。

Wrapping Up: A Harmonious Conclusion

总结：和谐的结论

So there you have it! Integrating Tableau with PingFederate and AWS IAM Identity Center isn't just about connecting tools; it's about creating a secure, streamlined, and user-friendly data analytics experience. Now go forth and make some data-driven music!

所以你有！将Tableau与Pingfederate和AWS IAM身份中心集成在一起，不仅仅是连接工具；这是关于创建安全，精简和用户友好的数据分析经验。现在去做一些数据驱动的音乐！