---
schema_version: "1"
id: 7553c513937f18a991c615e014f531a20d95c6ef1ccfdb3af8c4a8dc740c1c4a
title: Use Tableau Connected Apps for Application Integration
collection: tableau
version: next
locale: en-us
portal_url: https://docs.salesforce.com/tableau/next/en-us/online/connected_apps.md
canonical_url: https://help.tableau.com/v0.0/online/en-us/connected_apps.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 2a58d176ebe2d2b75011445cc627ffc605c23c4d98655afb0d2eafe522dd64c4
description: Use Tableau connected apps to establish trust for embedding content and authorizing REST API access.
---
[Skip to main content](#main-content)

# Use Tableau Connected Apps for Application Integration

Beginning in early January 2022, Tableau connected apps enable a seamless and secure authentication experience by facilitating an explicit trust relationship between your Tableau Cloud site and external applications where Tableau content is embedded. In June 2022, Tableau connected apps extended its capabilities to support REST API authorization. And as of October 2023, REST API authorization using connected apps is respected by the Tableau Metadata API. As of February 2025, REST API authorization using connected apps is respected by the Tableau VizQL Data Service.

**Note:** Tableau connected apps and Salesforce connected apps are different and offer different functionality. Today, Tableau connected apps are optimized for embedding Tableau views and metrics in external applications and used to authorize access to the Tableau REST API. (In October 2023, Tableau retired the ability to embed metrics in Tableau Cloud and Tableau Server version 2023.3.).

There are two types of connected apps you can configure: direct trust or OAuth 2.0 trust.

### Direct trust

Using _direct trust_, you can:

- Restrict access to which content can be embedded and where that content can be embedded
- Provide users the ability to access embedded content using single sign-on (SSO) without having to integrate with an identity provider (IdP)
- Provide users the ability to authenticate directly from your external application
- Programmatically authorize access to the Tableau REST API and Tableau Metadata API (starting in Tableau Cloud October 2023) on users' behalf using JSON Web Token (JWT)
- Programmatically authorize access to the Tableau REST API and Tableau VizQL Data Service (starting in Tableau Cloud February 2025) on users' behalf using JSON Web Token (JWT)
- Scope Tableau REST API capabilities users or applications can perform
- Enable additional features like:
    - User attribute functions (March 2023)
    - On-demand access (October 2023)
    - Dynamic group membership using assertions (June 2024)
    - External tokens for SCIM (June 2025)

For more information about this connected app type, see [Configure Connected Apps with Direct Trust](https://help.tableau.com/v0.0/online/en-us/connected_apps_direct.htm).

### OAuth 2.0 trust

Using _OAuth 2.0 trust_, you can:

- Restrict access to which content can be embedded and where that content can be embedded
- Provide users the ability to access embedded content using single sign-on (SSO) through your identity provider (IdP)
- Provide access using standard OAuth 2.0 standard protocol
- Programmatically authorize access to Tableau REST API and the Metadata API (starting in Tableau Cloud October 2023) on users' behalf
- Programmatically authorize access to Tableau REST API and the VizQL Data Service (starting in Tableau Cloud February 2025) on users' behalf
- Scope Tableau REST API capabilities users or applications can perform
- Enable additional features like:
    - User attribute functions (March 2023)
    - On-demand access (October 2023)
    - Dynamic group membership using assertions (June 2024)
    - External tokens for SCIM (June 2025)

For more information about this connected app type, see [Configure Connected Apps with OAuth 2.0 Trust](https://help.tableau.com/v0.0/online/en-us/connected_apps_eas.htm).

## Other articles in this section