---
schema_version: "1"
id: 21a2e446e63d979bcf849b60eea8320c9e0c6417149a64f0b1296da293004628
title: Use Tableau Connected Apps for Application Integration
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/online/connected_apps.md
canonical_url: https://help.tableau.com/current/online/en-us/connected_apps.htm
source_site: help.tableau.com
content_type: documentation
content_hash: f0384b0f1c5e8bb64f593f49af7ebd35eb5325e8b92ef3813bb070cc3c128dee
description: Use Tableau connected apps to establish trust for embedding content and authorizing REST API access.
---
[Skip to main content](#main-content)

# Use Tableau Connected Apps for Application Integration

Beginning in early January 2022, Tableau connected apps enable a seamless and secure authentication experience by facilitating an explicit trust relationship between your Tableau Cloud site and external applications where Tableau content is embedded. In June 2022, Tableau connected apps extended its capabilities to support REST API authorization. And as of October 2023, REST API authorization using connected apps is respected by the Tableau Metadata API. As of February 2025, REST API authorization using connected apps is respected by the Tableau VizQL Data Service.

**Note:** Tableau connected apps and Salesforce connected apps are different and offer different functionality. Today, Tableau connected apps are optimized for embedding Tableau views and metrics in external applications and used to authorize access to the Tableau REST API. (In October 2023, Tableau retired the ability to embed metrics in Tableau Cloud and Tableau Server version 2023.3.).

There are two types of connected apps you can configure: direct trust or OAuth 2.0 trust.

### Direct trust

Using _direct trust_, you can:

- Restrict access to which content can be embedded and where that content can be embedded
- Provide users the ability to access embedded content using single sign-on (SSO) without having to integrate with an identity provider (IdP)
- Provide users the ability to authenticate directly from your external application
- Programmatically authorize access to the Tableau REST API and Tableau Metadata API (starting in Tableau Cloud October 2023) on users' behalf using JSON Web Token (JWT)
- Programmatically authorize access to the Tableau REST API and Tableau VizQL Data Service (starting in Tableau Cloud February 2025) on users' behalf using JSON Web Token (JWT)
- Scope Tableau REST API capabilities users or applications can perform
- Enable additional features like:
    - User attribute functions (March 2023)
    - On-demand access (October 2023)
    - Dynamic group membership using assertions (June 2024)
    - External tokens for SCIM (June 2025)

For more information about this connected app type, see [Configure Connected Apps with Direct Trust](https://help.tableau.com/current/online/en-us/connected_apps_direct.htm).

### OAuth 2.0 trust

Using _OAuth 2.0 trust_, you can:

- Restrict access to which content can be embedded and where that content can be embedded
- Provide users the ability to access embedded content using single sign-on (SSO) through your identity provider (IdP)
- Provide access using standard OAuth 2.0 standard protocol
- Programmatically authorize access to Tableau REST API and the Metadata API (starting in Tableau Cloud October 2023) on users' behalf
- Programmatically authorize access to Tableau REST API and the VizQL Data Service (starting in Tableau Cloud February 2025) on users' behalf
- Scope Tableau REST API capabilities users or applications can perform
- Enable additional features like:
    - User attribute functions (March 2023)
    - On-demand access (October 2023)
    - Dynamic group membership using assertions (June 2024)
    - External tokens for SCIM (June 2025)

For more information about this connected app type, see [Configure Connected Apps with OAuth 2.0 Trust](https://help.tableau.com/current/online/en-us/connected_apps_eas.htm).

## Other articles in this section