---
schema_version: "1"
id: db2854d89d1932ef98ef30bf49b6cc033ec217622745088ed15fc88e9ce26d69
title: Set Up Trust Between Salesforce and Tableau Cloud
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/analytics/264-0-0/c360_a_sl_data_models_pds_trust.md
canonical_url: https://help.salesforce.com/s/articleView?id=analytics.c360_a_sl_data_models_pds_trust.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 06f49c87d5a28bf443c5e472fe82f3dccf72199523b673e479732fcbc4022843
description: To create a semantic model from a PDS, you’ll first need to establish a trusted connection between your Salesforce org and Tableau Cloud site.
products:
  - Data 360
release: "264"
---
# Set Up Trust Between Salesforce and Tableau Cloud

To create a semantic model from a PDS, you’ll first need to establish a trusted connection between your Salesforce org and Tableau Cloud site.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: All editions supported by <span>Data 360</span>. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;language=en_US" target="_blank"><span>Data 360</span> edition availability</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d15352e63">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d15352e63 ">To set up trust between Salesforce and Tableau Cloud:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d15352e63 ">
              <p>Data Cloud Architect permission set</p>
              <p>AND</p>
              <p>Semantic Models permission
                set</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Tableau Next license</p>
            </td>

          </tr>
        </tbody>
      </table>

This steps below must be completed by both a Salesforce Admin and a Tableau Admin.

## Add Tableau User Ids to Salesforce Users

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-semantics-264-0-0-production-enus/f7c99ab1-3439-4722-b925-34cb47455d89/images/icon_note.png)

Note The semantic model will use this user identity to query the PDS, including respecting any row-level security in the PDS.

1. To set up trust between Salesforce and Tableau Cloud, as a Salesforce Admin, click **Setup** to open the Salesforce Setup page.
    
    ![Salesforce Setup page](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-semantics-264-0-0-production-enus/f7c99ab1-3439-4722-b925-34cb47455d89/semantics/images/semanticlayer/sl_pds_sf_setup.png)
2. Use search to find and open Tableau Embedding.
3. Use the Select Tableau User Identity field parameter to specify which Salesforce user field corresponds to the Tableau user identity.
4. If the Salesforce user’s email matches the Tableau user’s email, set Select Tableau User Identity field to Email.
    
    ![Setting Select Tableau User Identity field to Email](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-semantics-264-0-0-production-enus/f7c99ab1-3439-4722-b925-34cb47455d89/semantics/images/semanticlayer/tableau_user_id_field.png)
5. If the emails are different, you’ll need to create a custom field on the User object in Salesforce to store the Tableau user identifier. To create the custom field, in Salesforce Setup, go to the Object Manager tab, search for and open the User object. Then click **Fields and Relationships** and click **New** to create the field. After the field is created, return to Tableau Embedding and select it from the **Select Tableau User Identity** field dropdown.

## Create Connected App in Tableau

1. Copy the following two parameters from Tableau Embedding: Issuer URL and JWKS URI. These values are required to establish a connection with your Tableau Cloud site.
    
    ![Tableau Embedding Parameters](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-semantics-264-0-0-production-enus/f7c99ab1-3439-4722-b925-34cb47455d89/semantics/images/semanticlayer/tableau_embedding_parameters.png)
2. Now, as a Tableau Admin, log in to your Tableau Site, then go to Settings > Connected Apps and click **New Connected App**. Make sure to select OAuth 2.0 Trust, as it’s the only option that allows specifying the JWKS URI and Issuer URL required for integration with Salesforce.
3. Enter a name for the connected app.
4. Copy the Issuer URL and JWKS URI from Salesforce and paste them into the connected app form.
5. Select the checkbox to enable the connected app.
6. Click **Create** to complete the setup.

Once trust is configured, you can create a new model in the Data 360 Semantic Layer by connecting to the appropriate PDS.