Domo Embed helps you distribute live dashboards in the websites and software where your customers and partners already spend time. These are supported methods to personalize embedded analytics so you can keep the data safe for you and relevant for them:
SSO and PDP
To ensure everyone only sees the authorized version of the data you have approved, Domo integrates SSO with any identity provider so users only have to login once.
Users are created in Domo to reflect the profiles that already exist in your systems. This can be done as a batch before launch of the embedded content. Otherwise, provisioning can be automated via the User API as viewers load the content for the first time.
Then PDP policies are created in the Domo platform. These policies narrow down the underlying datasets to only show the rows the viewer is authorized to see. That way, you can share a single version of the data and content while staying confident in the entitlement governance for each viewer.
This is the preferred method when users are more comfortable with the Domo web interface and less comfortable configuring server-side code.
Details on SSO integration can be found in the knowledge base:
If you prefer not to work through the licensing and provisioning of mirror users both in your systems and Domo, the main alternative is to persist the policies you have already setup in your systems by applying Programmatic Filters in server-side code. This way, you can still personalize embedded content for any number of viewers even if they do not have a Domo account.
This diagram summarizes the flow of tokens and data through the service account that acts as proxy for all other viewers. Steps 1-5 highlight the sequence of messages between your servers and the Domo API during Programmatic Filtering.
Step 1. Point iframe to your server
A. Download the sample code from one of the example GitHub repositories to access even more detailed instructions in the readme file:
- The ASP version is based on a .NET repository
B. Open the “sample.html” file in the example code
- Focus on this line: <iframe src=”http://localhost:3001/embed/item/1″ width=”1200″ height=”600″ scrolling=”no”></iframe>
- When you are ready to move from testing to a production environment, replace localhost:3001 with the domain for your server
- This can feel counter-intuitive at first since the default embed code is an iframe that points to the Domo instance
- However, this temporary detour in your domain is how the server side code is processed before the final version of the embedded content is sent by Domo
- Step 4 below will swap your domain with the Domo instance domain in the self-submitting HTML form
Step 2. Get access token
A. Activate an API client buy signing in to developer.domo.com as the user who will serve as proxy for every other viewer:
B. Create an account by clicking My Account > New Client and filling out the fields as follows:
- For more information about creating the CLIENT_ID and CLIENT_SECRET review the details in the following link:
C. Copy the IDs for the cards or dashboards from the embed dialog in Domo using the “private” authenticated option:
D. Create a file with a blank name and .env extension
- Customize the configuration settings with your own values
- Include “USE_XHR=true” only if cookie based authentication won’t work for the endpoint on your server.
- The CLIENT_ID and CLIENT_SECRET is used to create the access token which will be used to then create an embed token for use with the private embed.
- The EMBED_ID references the card or the dashboard you are embedding.
- The EMBED_TYPE must be either the word ‘dashboard’ or ‘card’ (without the quotes).
- Save the .env file in the same directory as the sample code
Step 3. Get embed token
A. Open the embed.js file
- Notice it covers these functions:
- No customization should be required
Processing can be viewed from the command line when the testing environment is live (see step 5)
Deeper details on the possible requests and responses for the Embed API can be found here:
Step 4. Return html form
A. Open the file users.js in a text editor and modify the filter settings for each user to customize the filtering that each user will have applied to them.
- Currently each user has an empty filter being applied to them “”.
- There are some example filters in the file that are commented out that you can use that give you an idea of the format expected for the filters.
- Once you make filter changes to the users.js file, you will need to save the file, restart the express server, refresh the page, and then log back in.
- It is critical that the developer of the code understands the schema of the underlying dataset.
- Otherwise, the query will fail and the api will respond with “Bad Request”.
- This is to maintain the security of your server-side Programmatic Filters.
- The complete list of available operators for use in filters are:
- “LESS_THAN”, “LESS_THAN_EQUALS_TO”
Step 5. Token and filter submitted in form
A. Navigate to the base folder where the repository was unzipped to install the necessary dependencies
B. Start the express server by running the “yarn start” or “node express” command from the base folder of the project in Terminal / Command line.
- Go to the url localhost:3001 in your browser and verify that you are able to see the card or dashboard after you login.
- The available usernames are listed in the express.js file (“mike”, “susan”, “tom”, and “rachael”).
- The password is not verified and so any will work.