Prerequisites
Before you begin, make sure you have:- A Tableau Cloud site (or Tableau Server) and its hostname.
- A Direct Trust connected app (created below) — its Client ID, Secret ID, and Secret Value.
- A Tableau user whose email Modus will use as the JWT subject, with read access to the content you want Modus to use.
Set up a connected app
Modus authenticates with a Direct Trust connected app (JWT).1
Create the connected app
In Tableau, open Settings → Connected Apps and create a Direct Trust
app. Copy the Client ID.
2
Generate a secret
Add a secret to the app and copy both the Secret ID and the Secret
Value. Then enable the connected app.
3
Choose the JWT subject and scopes
Pick a Tableau user (by email) with read access to the target content — Modus
signs its JWT as this user. The connected app must permit these scopes:
tableau:content:readtableau:datasources:downloadtableau:workbooks:downloadtableau:views:download
Network access
If you run Tableau Server behind a firewall, allow Modus’s egress IP addresses so it can reach your instance. See IP Allowlisting. (Tableau Cloud is reachable directly.)Connect in Modus
1
Open the Tableau connection form
- Log into Modus.
- Click Integrations in the left sidebar.
- Find the Tableau card under BI & Visualization and click Connect.
2
Fill in the connection details
Complete the form using the field reference below.

3
Test and save
- Click Test Connection to verify Modus can reach your site.
- Click Save Connection.
Connection form field reference
Troubleshooting
Verification
Your Tableau site is now connected. Modus turns your workbooks, views, and published data sources into context so Modus can give accurate, data-aware answers. Need help? Contact us at support@getmodus.com.Modus connects read-only and requests only the minimum scopes needed to
understand your content. The signing secret is encrypted and stored in AWS
Secrets Manager — never in plaintext.