---
sourceDocument: Zurich IT Asset Management
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/it-asset-management

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich IT Asset Management

ft:clusterId :

    - itam

bundleId :

    - itam

workflow :

    - Technology


---

# Integrating with Tableau Cloud

# Integrating with Tableau Cloud {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 7 minutes to read

Integrating your Software Asset Management application with the Tableau Cloud application enables you to track your software subscriptions and to reclaim stale licenses.  
Important:  
Minimize security risks and protect information by granting access only to the necessary user or API permissions.{#integrate-with-tableau-cloud__table_box__entry__3}

| Process | Required user role in the Tableau Cloud application | Authentication scopes |
|-|-|-|
| Download subscriptions | site administrator | None |
| Pull user activity | site administrator | None |
| Reclaim subscription | site administrator | None |
[Table 1. Minimal user permissions]

{#integrate-with-tableau-cloud__box-title}

## Register a Tableau Cloud application {#ariaid-title2}

Register a Tableau Cloud application through the Tableau Cloud admin portal.

### Before you begin

* Activate the Tableau spoke. For more information, see [Tableau spoke](https://www.servicenow.com/docs/access?context=tableau-spoke&version=zurich&pubname=zurich-integrate-applications&ft:locale=en-US).
* Tableau Cloud Role required: site administrator

### Procedure

Use one of the following authentication types to validate ServiceNow instance requests with Tableau Cloud.

* Personal Access Token (PAT)
* JSON Web Token (JWT)

{#register-tableau-application__choices_otl_xtw_y1c}

1. Validate ServiceNow instance requests with Tableau Cloud using the PAT authentication type.  
   1. Log in to the Tableau Cloud account using admin credentials.
   2. Select your profile icon.
   3. Select My Account Settings.
   4. Scroll down to the Personal Access Tokens section on your profile page.
   5. In the text field, provide a token name.For example, <kbd class="ph userinput">Test 1</kbd>.

   6. Select Create Token.

      The Personal Access Token is generated with a Token name and Secret.
   7. To copy the Personal Access Token Secret, select Copy Secret.  
      Important:  
      Keep the Personal Access Token Secret at a secure place. You would need it when you create a connection record for Tableau.
   {#register-tableau-application__ol_y2h_tff_cbc}
2. Validate ServiceNow instance requests with Tableau Cloud using the JWT authentication type.  
   1. Log in to the Tableau Cloud account using admin credentials.
   2. Select your profile icon.
   3. From the left-pane, select Settings.
   4. Select the Connected Apps tab.
   5. On the Connected Apps page, select the Direct Trust option from the New Connected Apps drop-down list.
   6. In the Create Connected App dialog box, fill in the Connected app name, Access level, and Domain allow list details.
   7. Select Create.

      The Connected App that you created gets displayed on the Connected Apps page. By default, the Connected App is inactive.
   8. To enable the Connected App, select the ellipsis icon next to the Connected App name and then select Enable.

      The status of the Connected App shows as enabled.
   9. Select the Connected App name.Keep the Secret ID and Secret value at a secure place. You would need it when you create a connection record for Tableau.

   10. To copy the Client ID, select Copy Client ID.

       Keep the Client ID at a secure place. You would need it when you create a connection record for Tableau.
   {#register-tableau-application__ol_mv4_bhf_cbc}
{#register-tableau-application__substeps_u21_sff_cbc}

## Create a Tableau Cloud integration profile {#ariaid-title3}

Create an integration profile to track software subscriptions and optimize licensing for the Tableau Cloud service.

### Before you begin

To create a Tableau Cloud integration profile, request the Software Asset Management - SaaS License Management plugin (sn_sam_saas_int) from the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home).

ServiceNow Role required: admin or sam_integrator  
Important:  
You must select the Software Asset Management integration with Tableau check box for this integration while installing optional features on the [Application Manager](https://www.servicenow.com/docs/access?context=application-manager&version=zurich&pubname=zurich-platform-administration&ft:locale=en-US) page. For more information about choosing the required SaaS applications, see [Request SaaS License Management](https://www.servicenow.com/docs/2VPNsKSGv4R503EL5y0Uew "Request the Software Asset Management - SaaS License Management plugin (sn_sam_saas_int) so that you can create and manage integrations with your SaaS and Single Sign-on (SSO) applications. You can use these integrations to track license usage and to reclaim unused licenses.").

### About this task

If you're using the Software Asset Workspace, the option to create the integration profile in Core UI is inactive.

### Procedure

1. Navigate to the integration profile.

   | Interface | Action |
   | Core UI | 1. Navigate to AllSoftware AssetSaaS LicenseDirect Integration Profiles. 2. Select New. 3. Select Tableau Cloud. {#create-tableau-integration-profile__ol_ijd_bjk_qtb} |
   | Software Asset Workspace | 1. Navigate to License operationsUser SubscriptionsDirect integration profiles. 2. Select New. 3. Select Tableau Cloud from the drop-down list. 4. Select Continue. {#create-tableau-integration-profile__ol_wjd_bjk_qtb} |
   |-|-|

   {#create-tableau-integration-profile__choicetable_o3p_z3k_qtb}
2. On the form, fill in the fields.  
   {#create-tableau-integration-profile__table_m4c_prp_qqb__entry__2}

   | Field | Value |
   |-|-|
   | Display name | Name of the integration profile. For example, <kbd class="ph userinput">Tableau integration</kbd>. |
   | Status | Status of the integration profile. * If you haven't published the integration profile, this field is automatically set to  Draft. * If you have already published the integration profile, this field is automatically set to  Published. {#create-tableau-integration-profile__ul_uwn_45f_cbc} |
   | Profile type | Type of integration profile. This field is automatically set to Tableau Cloud Subscription. |
   [Table 2. Integration profile form]

   {#create-tableau-integration-profile__table_m4c_prp_qqb}
3. Review the required user roles or API permissions specified in the Vendor configuration field for each process to minimize security risks and optimize SaaS licenses.  
   Note:  
   For more information, see [Minimal user permissions](https://www.servicenow.com/docs/RxofhMGbV6z_IAUXiOExhg#integrate-with-tableau-cloud "Integrating your Software Asset Management application with the Tableau Cloud application enables you to track your software subscriptions and to reclaim stale licenses.") table.
   1. In the Download Subscription Subflow section, verify that the Subflow field is set to Tableau Cloud Download Subscriptions.  
      Note:  
      The Download subscriptions check box is selected by default and you can't clear it.
   2. In the Reclaim Subscription Subflow section, verify that the Subflow field is set to Tableau Cloud Reclaim Subscription.  
      Note:  
      The Reclaim subscriptions check box is selected by default. If you don't want to reclaim subscriptions, you can clear this check box. If you clear it, the removal candidates are created but the reclaim subscription subflow isn't triggered or the reclamation process isn't initiated.
   {#create-tableau-integration-profile__substeps_rcm_pwm_vcc}
4. Select Save.  
   A draft integration profile is created.

   The Connection \& Credential field appears and is automatically set to sn_tableau_spoke.TableauCloud.
5. Open the connection \& credential aliases record by selecting the preview icon (![Preview icon.]()) beside the Connection \& Credential field.
6. Select Open Record in the record preview.
7. Select the Create New Connection \& Credential related link.
8. On the form, fill in the fields.  
   {#create-tableau-integration-profile__table_g5k_ngv_mjb__entry__2}

   | Field | Description |
   |-|-|
   | Please Enter the Connection Information ||
   | Connection Name | Name of the connection. This field is automatically set to Tableau Cloud Connection. |
   | Connection URL | The URL used for connecting to the server on which Tableau Cloud is installed. For example, <kbd class="ph userinput">https://&lt;server&gt;.online.tableau.com/api/</kbd>. |
   | Content URL | The permanent name of the site to sign in to. The content URL appears in the URL path of Tableau content in your browser address bar after the Tableau Server URL. mySite is the content URL in the following example: <kbd class="ph userinput">http://&lt;server or cloud URL&gt;/#/site/mySite/explore</kbd>. |
   | Please Enter the Credential Information Select the Personal Access Token (PAT) or JSON Web Token (JWT) authentication type. The fields change based on the authentication type that you select. ||
   | Fields for the PAT authentication type ||
   | Token Name | The Token name that you provided while registering the Tableau Cloud application by using the PAT authentication type. For more information, see [Register a Tableau Cloud application](https://www.servicenow.com/docs/RxofhMGbV6z_IAUXiOExhg#register-tableau-application "Register a Tableau Cloud application through the Tableau Cloud admin portal."). |
   | Token Secret | The Token secret that you copied while registering the Tableau Cloud application by using the PAT authentication type. For more information, see [Register a Tableau Cloud application](https://www.servicenow.com/docs/RxofhMGbV6z_IAUXiOExhg#register-tableau-application "Register a Tableau Cloud application through the Tableau Cloud admin portal."). |
   | Expiry Interval (sec) | Life span of the generated Personal Access Token (PAT). Default value: 14400 sec Important: You mustn't modify the value of this field. |
   | Fields for the JWT authentication type ||
   | Secret ID | The Secret ID that you copied while registering the Tableau Cloud application by using the JWT authentication type. For more information, see [Register a Tableau Cloud application](https://www.servicenow.com/docs/RxofhMGbV6z_IAUXiOExhg#register-tableau-application "Register a Tableau Cloud application through the Tableau Cloud admin portal."). |
   | Secret Value | The Secret value that you copied while registering the Tableau Cloud application by using the JWT authentication type. For more information, see [Register a Tableau Cloud application](https://www.servicenow.com/docs/RxofhMGbV6z_IAUXiOExhg#register-tableau-application "Register a Tableau Cloud application through the Tableau Cloud admin portal."). |
   | Username | User name, that is, email address of the authenticated Tableau Cloud user. |
   | Client ID | The Client ID that you copied while registering the Tableau Cloud application by using the JWT authentication type. |
   | Expiry Interval (sec) | Life span of the generated JSON Web Token (JWT). Default value: 3600 sec Important: You mustn't modify the value of this field. |
   [Table 3. Create Connection and Credential form]

   {#create-tableau-integration-profile__table_g5k_ngv_mjb}
9. Select Create.
10. On the integration profile form, select Validate Connection to verify the connection and credential details of this integration.  
    Validating the connection verifies the Download Subscriptions APIs, but not the Reclaim Subscriptions APIs.
11. Select Publish.
12. In the Publish Confirmation dialog box, select OK.

### What to do next

After the integration connects, your ServiceNow instance automatically creates software models, reclamation rules, and software subscriptions that are refreshed daily.  
After creating an integration profile, view information about the profile in the Software Asset Workspace by navigating to License operationsUser subscriptionDirect integration profiles. You can select an integration profile to view the following related lists. If the following related lists aren't visible for an integration profile in the default view, you can select the custom integration view from the Details tab:

* Software Models
* Unrecognized Subscription Identifiers
* Scheduled Jobs
* Scheduled Job Results
* Software Subscriptions
* Subscription Identifier Exclusion Rule
* Subscription User Exclusion Rule
{#create-tableau-integration-profile__ul_gxp_qfk_rfc}

After creating an integration profile, you can define subscription exclusion rules to keep certain subscriptions from license cost calculations. For more information, see [Subscription exclusions for SaaS and SSO applications](https://www.servicenow.com/docs/bVJrkophBDLo8JMEiGX_Bw#subscription-exclusions "Define subscription exclusions for your SaaS and SSO applications to optimize your licensing costs by keeping the excluded subscriptions out of license cost calculations.").

If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see [Create a child alias to set up multiple integration profiles](https://www.servicenow.com/docs/B3d2wfmwRbcdy~H9gCDy3A "Create a child alias to set up multiple integration profiles with unique connections and manage different configurations for each integration profile.").

Review all automatically generated reclamation rules to reclaim user subscriptions. For more information, see [Review a software reclamation rule](https://www.servicenow.com/docs/hXAjfp3sn3x4hFFvqm~3Iw "Use reclamation rules to cancel user subscriptions that have limited to no activity.").  
Create software entitlements for the automatically generated software models to track used software against owned software.

* For more information on creating software entitlements in the Software Asset Management Core UI, see [Create entitlements in Software Asset Management classic](https://www.servicenow.com/docs/fSB_J0XtiCVH9Yb3z0nl5Q "Create entitlements in the Software Asset Management application classic to record your license details and allocate purchased software rights to users or devices.").
* For more information on creating software entitlements in the Software Asset Workspace, see [Create entitlements in workspace](https://www.servicenow.com/docs/O~JVsyQdaW99Fe~XMND4nA "Create entitlements in the Software Asset Workspace to enter your license details and allocate purchased software rights to users or devices.").
* For more information on creating software entitlements using the Software Asset Management Playbook, see [Create entitlements using the guided walk-through](https://www.servicenow.com/docs/wJ~MxrbMj7k2PMSUNbBcaQ "Use the guided walk-through playbook for a step-by-step process of creating entitlements.").
{#create-tableau-integration-profile__ul_cbz_vhr_sqb}  
Reconciliation also runs on your subscriptions as a scheduled job or on-demand. You can view your reconciliation results in the [License Workbench](https://www.servicenow.com/docs/SRttnWmeSWHbtUcWT_EVIg "Review reconciliation results in a simplified workbench view.") (Software Asset Management classic application) or the [License usage view](https://www.servicenow.com/docs/4DsgjV93XfS5XdUvFJKXAw "Use the license usage view as a single plane to understand the license position of all software products, remediate non-compliance, view reconciliation results, view, or add removal candidates, and view Software Asset Management related reports.") (Software Asset Workspace). Use these results to determine your license compliance position and to remediate any non-compliance.

* For more information on running reconciliation in the Software Asset Management classic application, see [Run software reconciliation in Software Asset Management classic](https://www.servicenow.com/docs/4Wmi3GcnvHNlu_55smQiDg "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in your environment on demand.").
* For more information on running reconciliation in the Software Asset Workspace, see [Run software reconciliation in the workspace](https://www.servicenow.com/docs/zHSY1HGusrWVWkmoXuMwWA "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in the Software Asset Workspace environment on-demand.").
{#create-tableau-integration-profile__ul_qgf_zhr_sqb}

*[\>]: and then