KNOWLEDGE BASE

Prompts for Credentials Continue to Occur After Enabling Automatic Login


Published: 15 Mar 2013
Last Modified Date: 12 Jun 2018

Issue

After you enable automatic logon in Tableau Server, users are still required to enter credentials.

Environment

  • Tableau Server
  • Enable Automatic Login on (SSPI)
  • Chrome
  • Internet Explorer

Resolution

Step 1

In Internet Explorer, add the URL for your Tableau Server to the Local Intranet or Trusted Sites security zone. For more information, see Security zones: adding or removing websites in the Microsoft knowledge base.

    Step 2

    Enable automatic logon with current user name and password.

    1. In Internet Explorer, navigate to Settings > Internet Options.
    2. On the Security tab, click Custom Level.
    3. Under User Authentication, select Automatic logon with current user name and password.
    Note: Changes made in the Internet Options dialog box will also affect Chrome. 

    Step 3

    If the above steps do not resolve the issue, ensure that domain nickname used by Windows is mapped in Tableau Server.
    1. On the computer  where the login issue is being experienced, open a command prompt and run whoami. Note the domain used. For more information, see whoami at Microsoft.
    2. On the computer running Tableau Server, open a command prompt as an administrator.
    3. Change directory to the Tableau Server bin directory, located by default at C:\Program Files\Tableau\Tableau Server\<version>\bin.
    4. Run the following commands:

      tabcmd login -s http://localhost/ -u <login name> -p <password>
      tabcmd listdomains

    If the domain returned in response to the whoami command is not listed in either the domain names or nicknames returned by tabcmd listdomains, it will need to be added.
    • If the missing domain is a domain nickname for a domain listed by tabcmd listdomains with an incorrect nickname, the nickname can be modified using the command tabcmd editdomain --id <id number from "tabcmd listdomains"> --nickname <nickname used by "whoami" in quotes>.
    • If the missing domain is a domain name that is incorrectly listed in tabcmd listdomains, the domain name can be updated using the command tabcmd editdomain --id <id number from "tabcmd listdomains"> --name <domain name used by "whoami" in quotes>".
    • If the nickname and domain returned by whoami are both missing from tabcmd listdomains, have the user explicitly login to Tableau Server using the Fully Qualified Domain Name first. This will add the domain to Tableau Server. Then use tabcmd listdomains and tabcmd editdomain to make any changes.

    Cause

    When automatic login is enabled, Tableau Server uses NTLM authentication to pass user credentials through a browser. In Internet Explore and Chrome, NTLM is only allowed for sites in the Local Intranet and/or Trusted Sites zones.
    Did this article resolve the issue?