ThoughtSpot Embedded Analytics: Trusted Auth for Devs

Learn how to implement trusted authentication for securely embedding ThoughtSpot into your applications using the Visual Embed SDK. This essential security practice involves setting up a server-side token server service to generate a bearer token. By keeping your powerful secret key on the server, you prevent its exposure on the client side. This approach allows your application to securely authenticate users with ThoughtSpot, enabling you to embed interactive analytics and data visualizations seamlessly, regardless of the programming language or framework you use for your backend, such as JavaScript, Python, or Java.

We dive into the technical details of implementing the token server, focusing on the core API call to ThoughtSpot's /API/REST2.0/AUTH/TOKEN/FULL endpoint. You'll see how to use the mandatory secret key and username parameters to generate tokens for existing users. Furthermore, we explore the powerful optional parameters like autocreate, which allows you to automatically create new users on the fly if they don't exist. The group identifier parameter lets you dynamically assign users to groups upon creation or login, controlling their access to objects like liveboards and answers and granting specific privileges. You can even use this API to update existing users' group memberships and access levels.

Implementing trusted authentication provides a robust and flexible way to manage user access and security within your embedded analytics solution. It ensures your sensitive credentials are never exposed client-side while giving you granular control over user management. ThoughtSpot also offers API SDKs (TypeScript, Python) to simplify calling these endpoints with helpful features like autocompletion.

Ready to build secure embedded analytics?

Explore our comprehensive documentation and resources for developers at https://bit.ly/4jDVAef to learn more about this and other powerful embedding features. Join our Discord:   / discord