Skip to main content
Connect your Tableau site to Modus so its workbooks, views, and published data sources become context that Modus can reason over. Modus connects read-only using a Direct Trust connected app and stores its signing secret encrypted in AWS Secrets Manager.

Prerequisites

Before you begin, make sure you have:
  • A Tableau Cloud site (or Tableau Server) and its hostname.
  • A Direct Trust connected app (created below) — its Client ID, Secret ID, and Secret Value.
  • A Tableau user whose email Modus will use as the JWT subject, with read access to the content you want Modus to use.

Set up a connected app

Modus authenticates with a Direct Trust connected app (JWT).
1

Create the connected app

In Tableau, open Settings → Connected Apps and create a Direct Trust app. Copy the Client ID.
2

Generate a secret

Add a secret to the app and copy both the Secret ID and the Secret Value. Then enable the connected app.
3

Choose the JWT subject and scopes

Pick a Tableau user (by email) with read access to the target content — Modus signs its JWT as this user. The connected app must permit these scopes:
  • tableau:content:read
  • tableau:datasources:download
  • tableau:workbooks:download
  • tableau:views:download

Network access

If you run Tableau Server behind a firewall, allow Modus’s egress IP addresses so it can reach your instance. See IP Allowlisting. (Tableau Cloud is reachable directly.)

Connect in Modus

1

Open the Tableau connection form

  1. Log into Modus.
  2. Click Integrations in the left sidebar.
  3. Find the Tableau card under BI & Visualization and click Connect.
2

Fill in the connection details

Complete the form using the field reference below.
Modus Tableau connection form
3

Test and save

  1. Click Test Connection to verify Modus can reach your site.
  2. Click Save Connection.

Connection form field reference

Troubleshooting

Verification

Your Tableau site is now connected. Modus turns your workbooks, views, and published data sources into context so Modus can give accurate, data-aware answers. Need help? Contact us at support@getmodus.com.
Modus connects read-only and requests only the minimum scopes needed to understand your content. The signing secret is encrypted and stored in AWS Secrets Manager — never in plaintext.