KNOWLEDGE BASE

Signing Into Tableau Server and Loading Embedded Views Fails on Safari 12 After Upgrading Tableau Server


Published: 24 Jan 2020
Last Modified Date: 05 Feb 2020

Issue

After upgrading Tableau Server, signing in to Tableau Server from Safari 12 fails and embedded views fail to load.
 

Environment

  • Tableau Server 2019.4.2, 2019.3.4, 2019.2.8, 2019.1.12, 2019.3.14, 2018.2.17, 2018.1.20, 10.5.23, 10.4.24.
  • Safari 12
  • Embedded views

Resolution


As a workaround, use the attached script(s) that update the configuration to support the SameSite attribute for chrome but disable it for Safari 12.


Linux:

On each node in the Tableau Server cluster
  1. Disable vizportal.same_site by running the below commands:
    1. tsm configuration set -k vizportal.same_site -v “”
    2. tsm pending-changes apply
  2. Download the attached script SetSameSiteNone-Linux.sh
  3. Navigate to the directory containing the downlaoded script.
  4. Change the script to executable: sudo chmod +x  SetSameSiteNone-Linux.sh
  5. Run the script to update the Tableau Gateway configuration: sudo ./SetSameSiteNone-Linux.sh
  • If you do SSL Offloading (SSL on a Load Balancer/Proxy and not on Tableau Server), run the script with SSLOFFLOAD: sudo ./SetSameSiteNone-Linux.sh SSLOFFLOAD
  1. Perform a restart: tsm restart

Windows with Tableau Server 2018.2 and newer:

On each node in the Tableau Server cluster
  1. Disable vizportal.same_site by running:
    1. tsm configuration set -k vizportal.same_site -v “”
    2. tsm pending-changes apply
  2. Download the attached script SetSameSiteNone-TSM.cmd
  3. In an Administrative command prompt, navigate to the directory containing the downloaded script.
  4. Run the script to update the Tableau Gateway configuration:  SetSameSiteNone-TSM.cmd
  • If you do SSL Offloading (SSL on a Load Balancer/Proxy and not on Tableau Server), run the script with SSLOFFLOAD: SetSameSiteNone-TSM.cmd SSLOFFLOAD
  1. Perform a restart: tsm restart

Windows with Tableau Server 10.4 through 2018.1:

On each node in the Tableau Server cluster
  1. Disable vizportal.same_site by editing your tabsvc.yml
    1. If you are installed in a default location the file is in c:\ProgramData\Tableau\Tableau Server\config
    2. Open the file in a text editor other than Notepad, such as Notepad++ that will have a carriage return after each line in the file.
    3. At the end of the file, add a new line with the following contents: vizportal.same_site: ""
    4. From the Tableau Server bin directory run tabadmin config
    5. From the Tableau Server bin directory run tabadmin restart
  2. Download the attached script SetSamesiteNone-Tabadmin.cmd
  3. In an Administrative command prompt, navigate to the directory containing the downloaded script.
  4. Run the script to update the Tableau Gateway configuration: SetSameSiteNone-Tabadmin.cmd
  • If you do SSL Offloading (SSL on a Load Balancer/Proxy and not on Tableau Server), run the script with SSLOFFLOAD: SetSameSiteNone-Tabadmin.cmd SSLOFFLOAD
  1. Perform a restart: tabadmin restart 

Cause

This behavior is related to a known issue with ID 1064074 which is currently under investigation. 

 

Additional Information

In order to continue to support embedded Tableau views accessed via Chrome 80+,, Tableau must add the "SameSite=None" attribute to the "Set-Cookie" header for all required cookies. 
Due to the way Safari 12 handles the "SameSite=None"  attribute, this change can cause functionality to degrade for Safari 12 users. 

Developers: Get ready for new SameSite=None; Secure Cookie Settings
Did this article resolve the issue?