Resolution

To resolve this issue, enable unrestricted tickets. However, before you complete the following steps, see the cautionary note below them.

Unrestricted tickets can be enabled by using the Command Prompt from Tableau bin directory, and using the following commands in the order listed.

For Tableau Server (Windows) 2018.2 and above or Linux, run the following commands in command line:

1. tsm configuration set -k wgserver.unrestricted_ticket -v true
   

2. tsm pending-changes apply​​​​​​

• tabadmin set wgserver.unrestricted_ticket true
• tabadmin config
• tabadmin restart

Caution: Although trusted ticket is good for accessing one particular view, unrestricted tickets create a normal user session when redeemed. This presents a risk in that, if a user can obtain a ticket for an administrator account, the ticket will give the user unrestricted access to the Tableau Server. With a standard trusted ticket, even administrators can access only views.

Cause

This issue occurs when Tableau Server is configured to use trusted authentication. By default, trusted authentication works for single views only.

Additional Information

When wgserver.unrestricted_ticket is set to true, it mimics a single sign-on (SSO) authentication. This allows a user to authenticate on Tableau Server through the trusted ticket process until the user logs out, or the session expires.