Signing Into Tableau Server and Loading Embedded Views Fails on Safari 12 After Upgrading Tableau Server

Issue

After upgrading Tableau Server, signing in to Tableau Server from Safari 12 fails and embedded views fail to load.

Environment

Tableau Server 2019.4.2, 2019.3.4, 2019.2.8, 2019.1.12, 2019.3.14, 2018.2.17, 2018.1.20, 10.5.23, 10.4.24.
Safari 12
Embedded views

Resolution

As a workaround, use the attached script(s) that update the configuration to support the SameSite attribute for chrome but disable it for Safari 12.

Linux:

On each node in the Tableau Server cluster

Disable vizportal.same_site by running the below commands:
1. tsm configuration set -k vizportal.same_site -v “”
2. tsm pending-changes apply
Download the attached script SetSameSiteNone-Linux.sh
Navigate to the directory containing the downlaoded script.
Change the script to executable: sudo chmod +x SetSameSiteNone-Linux.sh
Run the script to update the Tableau Gateway configuration: sudo ./SetSameSiteNone-Linux.sh

If you do SSL Offloading (SSL on a Load Balancer/Proxy and not on Tableau Server), run the script with SSLOFFLOAD: sudo ./SetSameSiteNone-Linux.sh SSLOFFLOAD

Perform a restart: tsm restart

Windows with Tableau Server 2018.2 and newer:

On each node in the Tableau Server cluster

Disable vizportal.same_site by running:
1. tsm configuration set -k vizportal.same_site -v “”
2. tsm pending-changes apply
Download the attached script SetSameSiteNone-TSM.cmd
In an Administrative command prompt, navigate to the directory containing the downloaded script.
Run the script to update the Tableau Gateway configuration: SetSameSiteNone-TSM.cmd

If you do SSL Offloading (SSL on a Load Balancer/Proxy and not on Tableau Server), run the script with SSLOFFLOAD: SetSameSiteNone-TSM.cmd SSLOFFLOAD

Perform a restart: tsm restart

Windows with Tableau Server 10.4 through 2018.1:

On each node in the Tableau Server cluster

Disable vizportal.same_site by editing your tabsvc.yml
1. If you are installed in a default location the file is in c:\ProgramData\Tableau\Tableau Server\config
2. Open the file in a text editor other than Notepad, such as Notepad++ that will have a carriage return after each line in the file.
3. At the end of the file, add a new line with the following contents: vizportal.same_site: ""
4. From the Tableau Server bin directory run tabadmin config
5. From the Tableau Server bin directory run tabadmin restart
Download the attached script SetSamesiteNone-Tabadmin.cmd
In an Administrative command prompt, navigate to the directory containing the downloaded script.
Run the script to update the Tableau Gateway configuration: SetSameSiteNone-Tabadmin.cmd

If you do SSL Offloading (SSL on a Load Balancer/Proxy and not on Tableau Server), run the script with SSLOFFLOAD: SetSameSiteNone-Tabadmin.cmd SSLOFFLOAD

Perform a restart: tabadmin restart

Cause

This behavior is related to a known issue with ID 1064074 which is currently under investigation.

Additional Information

In order to continue to support embedded Tableau views accessed via Chrome 80+,, Tableau must add the "SameSite=None" attribute to the "Set-Cookie" header for all required cookies.
Due to the way Safari 12 handles the "SameSite=None" attribute, this change can cause functionality to degrade for Safari 12 users.

D evelopers: Get ready for new SameSite=None; Secure Cookie Settings