Tableau Server supports Kerberos constrained delegation only for data connectors whose ODBC/JDBC drivers are written to accept the forwarded Kerberos ticket. According to Tableau Server Help, the supported connectors are Microsoft SQL Server, SAP HANA, and Teradata. When Kerberos is enabled on Tableau Server and delegation is configured in Active Directory, a viewer’s Kerberos ticket can be forwarded to these three databases so that the database enforces its own row-level security. PostgreSQL’s driver does not accept a delegated ticket; therefore, Kerberos single sign-on to PostgreSQL from Tableau Server is not possible.

B. PostgreSQL – Tableau can use username/password or OAuth, but its driver cannot consume a delegated Kerberos ticket; delegation configuration is not supported.

1. Tableau Server Help “Configure Kerberos Delegation for SSO to Data Sources,” Tableau 2023.3, Section “Supported Connectors” (lists Microsoft SQL Server, SAP HANA, Teradata).

https://help.tableau.com/current/server/en-us/kerberosdelegation.htm

2. Tableau Server Help “Kerberos Database Connections,” 2023.3, Paragraph 2 (states PostgreSQL not supported for delegation).

https://help.tableau.com/current/server/en-us/kerberosdatabase.htm

3. Tableau Whitepaper “Kerberos in Tableau Server,” v2022-01, p. 6-7 (Supported Data Sources table).

4. MIT OpenCourseWare 6.858 Lecture Notes “Kerberos Delegation,” Fall 2020, slide 15 (explains requirement that backend service accept delegated ticket; aligns with Tableau’s list).