---
schema_version: "1"
id: 7f8c2df14b6ec16b7e589d97a4fb60f0d05d2174b4738ff7ddcc79596c643220
title: Use SAML SSO with Kerberos Database Delegation
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/server-linux/saml_with_kerberos.md
canonical_url: https://help.tableau.com/current/server-linux/en-us/saml_with_kerberos.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 4b0851bfdfb611bbd7c42cbafe4b4c0ebccbd17c41c3448a748da9a697827406
description: Use SAML SSO with Kerberos database delegation on Tableau Server.
---
[Skip to main content](#main-content)

# Use SAML SSO with Kerberos Database Delegation

In a Windows Active Directory (AD) environment, you can enable SAML single sign-on (SSO) to Tableau Server, along with Kerberos database delegation. This provides authorized users direct access to Tableau Server, as well as to the underlying data defined in their published workbooks and data sources.

## Overview of the process

![Conceptual image of authentication to Tableau Server via SAML and access to underlying data via Kerberos](/tableau/current/en-us/server-linux/en-us/Img/saml-auth-kerb-db-delegation.png "Conceptual image of SAML working with Kerberos")

In a typical scenario:

1. One of your Tableau analysts publishes a dashboard to Tableau Server. That dashboard contains a connection to a Hadoop cluster, for example, that is configured to accept Kerberos credentials.
    
    Then the workbook publisher sends a link to colleagues for review.
2. When a colleague clicks the link, Tableau Server authenticates the user through the SAML SSO process. Then it looks at the user’s authorization scheme, and if allowed, uses the Tableau Server keytab to accesses the underlying database on behalf of the user. This populates the dashboard with the Hadoop data that the user is authorized to see.

## Configure Tableau Server for SAML with Kerberos

Using SAML with Kerberos works inherently when you complete the processes to enable each separately:

1. Configure Tableau Server for SAML, as described in [Configure Server-Wide SAML](https://help.tableau.com/current/server-linux/en-us/config_saml.htm).
2. Configure Tableau Server and your underlying databases to accept Kerberos credentials, as described in [Enable Kerberos Delegation](https://help.tableau.com/current/server-linux/en-us/kerberos_delegation.htm) and related articles.