跳转至

Getting started（入门指南）

This guide will teach you how to authenticate with Foundry through Tableau, select a dataset, and get started building your first interactive dashboard.

Select Foundry as your data source in Tableau

  1. Launch Tableau and select Connect to Data.
  2. Under To a Server, click More.
  3. Search for and select Foundry by Palantir.

New Palantir Foundry connection in Tableau

Enter your Foundry URL

In the Foundry by Palantir dialog box, enter your Foundry URL in the Server field. You can find your Foundry URL by logging in, copying the URL, and deleting the https:// prefix as well as anything after .com.

For example, if your Foundry hyperlink is https://myfoundrylink.palantir.com/workspace/home, you should input myfoundrylink.palantir.com into the Tableau prompt.

Authenticate with Foundry

There are three options for authenticating with Foundry: Foundry OAuth, Foundry Token or Foundry OAuth Client Credentials. OAuth is the simplest way to start developing in Tableau Desktop.

If the report should rely on the permissions of the user viewing the report when publishing, the OAuth method should be used. This will prompt users to authenticate when they access the report. If instead it is sufficient for the report to use a static set of credentials for all users viewing the report, the client credentials method is recommended for long-term maintainability. Note that a Foundry administrator is required to initially configure the client credentials method.

:::callout{theme="neutral"} Note that once published, the authentication method cannot be changed from the Tableau Server web interface. Instead, republish the report from Tableau Desktop with the desired authentication method. :::

Foundry OAuth authentication

  1. Under the Authentication dropdown, select Foundry OAuth.
  2. In the OAuth URL field, enter https:// followed by the same URL you entered in the Server field.
  3. Select Sign In, and you will be redirected to a login window in your browser.
  4. Log in, and then select Allow to authorize Tableau to connect using your Foundry account.
  5. Once you are redirected to a webpage with the message "Tableau created this window to authenticate. It is now safe to close it", close the window and return to Tableau Desktop.

:::callout{theme="neutral"} If you receive an error when logging in to Foundry, it is likely your organization has not yet enabled the OAuth login option for Tableau. In this case, contact your Foundry administrator for support, referencing the instructions for enabling the OAuth client. :::

Publish a report with OAuth

If you intend to publish your report to Tableau Server with embedded credentials when using OAuth, you first need to configure credentials on Tableau Server by navigating to My Account Settings > Saved Credentials for Data Sources in Tableau Server. Refer to the Tableau documentation on Manage saved credentials for data connections ↗ for more information.

Foundry token authentication

  1. Under the Authentication dropdown, select Foundry Token.
  2. In the Token field, enter a unique user-generated token.
  3. Click Sign In.

Foundry third-party application client credentials (available since Tableau connector version 2.6.0)

Third-party application client credentials are the recommended method to use when publishing a report that only requires static credentials. This type of credential has no expiration.

A Foundry administrator will need to configure a third-party application. Follow the instructions to configure the application. Choose the confidential client option and ensure the client credentials grant is enabled. Do not enable the Ontology SDK.

Grant the appropriate permissions to the service user of the third-party application. Data access within Tableau will reflect the service user's level of access.

Within Tableau, under the Authentication dropdown menu, select Foundry OAuth Client Credentials. Enter the third-party application client ID in the OAuth Client ID field and the client secret in the Token field. Then, select Sign In.

:::callout{theme="neutral"} If are working in Tableau Server and attempt to change the authentication method to client credentials for a published report, you may receive an error due to a known Tableau Server issue. Instead, republish the report from Tableau Desktop to use client credentials authentication. :::

Select your dataset

After following the instructions listed above, you should see your Foundry environment listed under Connections in the left sidebar.

To start working with a specific dataset, use the navigation options in the left sidebar. Under the Database section, select a Foundry Project from the dropdown menu. Then under the Table section, use the search field to find a dataset by its name or full path.

Once you have loaded your dataset, choose the Connection mode (Live or Extract) and continue creating your Tableau dashboard as usual.

High data scale and Tableau Data Extracts

Higher data scale can be processed by using Tableau Data Extracts ↗, and ensuring that queries are "direct read eligible" when processed by Foundry SQL Server. See Architecture for details about direct read functionality.

中文翻译

入门指南

本指南将教您如何通过 Tableau 进行 Foundry 身份验证、选择数据集，并开始构建您的第一个交互式仪表板。

在 Tableau 中选择 Foundry 作为数据源

  1. 启动 Tableau 并选择 连接到数据 (Connect to Data)。
  2. 在 服务器 (To a Server) 下，点击 更多 (More)。
  3. 搜索并选择 Foundry by Palantir。

Tableau 中的新 Palantir Foundry 连接

输入您的 Foundry URL

在 Foundry by Palantir 对话框中，在 服务器 (Server) 字段中输入您的 Foundry URL。您可以通过登录 Foundry、复制 URL，并删除 https:// 前缀以及 .com 之后的所有内容来找到您的 Foundry URL。

例如，如果您的 Foundry 超链接是 https://myfoundrylink.palantir.com/workspace/home，则应在 Tableau 提示框中输入 myfoundrylink.palantir.com。

使用 Foundry 进行身份验证

有三种方式可用于 Foundry 身份验证：Foundry OAuth、Foundry 令牌 (Foundry Token) 或 Foundry OAuth 客户端凭据 (Foundry OAuth Client Credentials)。OAuth 是在 Tableau Desktop 中开始开发的最简单方式。

如果报告在发布时应依赖查看报告用户的权限，则应使用 OAuth 方法。这将在用户访问报告时提示他们进行身份验证。如果报告对所有查看用户使用静态凭据集即可满足需求，则建议使用客户端凭据方法以实现长期可维护性。请注意，需要由 Foundry 管理员来初始配置客户端凭据方法。

:::callout{theme="neutral"} 请注意，一旦发布，无法通过 Tableau Server Web 界面更改身份验证方法。相反，请使用所需的身份验证方法从 Tableau Desktop 重新发布报告。 :::

Foundry OAuth 身份验证

  1. 在 身份验证 (Authentication) 下拉菜单中，选择 Foundry OAuth。
  2. 在 OAuth URL 字段中，输入 https://，后跟您在 服务器 (Server) 字段中输入相同的 URL。
  3. 选择 登录 (Sign In)，您将被重定向到浏览器中的登录窗口。
  4. 登录，然后选择 允许 (Allow) 以授权 Tableau 使用您的 Foundry 账户进行连接。
  5. 当您被重定向到显示"Tableau 创建此窗口以进行身份验证。现在可以安全关闭"消息的网页时，关闭窗口并返回 Tableau Desktop。

:::callout{theme="neutral"} 如果在登录 Foundry 时收到错误，很可能是您的组织尚未为 Tableau 启用 OAuth 登录选项。在这种情况下，请联系您的 Foundry 管理员寻求支持，并参考启用 OAuth 客户端的说明。 :::

使用 OAuth 发布报告

如果您打算在使用 OAuth 时将报告发布到 Tableau Server 并嵌入凭据，您首先需要在 Tableau Server 上配置凭据，方法是导航至 Tableau Server 中的 我的账户设置 (My Account Settings) > 已保存的数据源凭据 (Saved Credentials for Data Sources)。有关更多信息，请参阅 Tableau 关于管理数据连接已保存凭据 ↗ 的文档。

Foundry 令牌身份验证

  1. 在 身份验证 (Authentication) 下拉菜单中，选择 Foundry 令牌 (Foundry Token)。
  2. 在 令牌 (Token) 字段中，输入一个唯一的用户生成令牌。
  3. 点击 登录 (Sign In)。

Foundry 第三方应用程序客户端凭据（自 Tableau 连接器 2.6.0 版本起可用）

第三方应用程序客户端凭据是在发布仅需要静态凭据的报告时推荐使用的方法。此类凭据没有过期时间。

需要由 Foundry 管理员配置第三方应用程序。请按照说明配置应用程序。选择机密客户端 (confidential client) 选项，并确保启用客户端凭据授权 (client credentials grant)。请不要启用 Ontology SDK。

为第三方应用程序的服务用户授予适当的权限。Tableau 内的数据访问将反映服务用户的访问级别。

在 Tableau 中，从 身份验证 (Authentication) 下拉菜单中选择 Foundry OAuth 客户端凭据 (Foundry OAuth Client Credentials)。在 OAuth 客户端 ID (OAuth Client ID) 字段中输入第三方应用程序客户端 ID，在 令牌 (Token) 字段中输入客户端密钥。然后，选择 登录 (Sign In)。

:::callout{theme="neutral"} 如果您在 Tableau Server 中工作，并尝试将已发布报告的身份验证方法更改为客户端凭据，可能会因已知的 Tableau Server 问题而收到错误。相反，请从 Tableau Desktop 重新发布报告以使用客户端凭据身份验证。 :::

选择您的数据集

按照上述说明操作后，您应该会在左侧边栏的 连接 (Connections) 下看到您的 Foundry 环境。

要开始处理特定数据集，请使用左侧边栏中的导航选项。在 数据库 (Database) 部分，从下拉菜单中选择一个 Foundry 项目。然后在 表 (Table) 部分，使用搜索字段按名称或完整路径查找数据集。

加载数据集后，选择 连接 (Connection) 模式（实时 (Live) 或 提取 (Extract)），然后像往常一样继续创建您的 Tableau 仪表板。

高数据规模与 Tableau 数据提取

通过使用 Tableau 数据提取 ↗，并确保查询在由 Foundry SQL Server 处理时符合"直接读取资格"，可以处理更高的数据规模。有关直接读取功能的详细信息，请参阅架构。