Steps to configure SAML SSO for Tableau

About Tableau

Tableau is a software platform designed to make data analysis accessible to users across various skill levels. It enables individuals and organizations to create complex visualizations without requiring extensive technical knowledge. Users can connect to multiple data sources, including spreadsheets, databases, and cloud services, allowing for flexible data integration and exploration.

The following steps will help you enable single sign-on (SSO) for Tableau from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more information, refer to pricing details.
2. Log in to Identity360 as an Admin or Super Admin.
3. Navigate to Applications > Application Integration > Create New Application, and select Tableau from the applications displayed.
   Note: You can also find Tableau from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Enter the Account ID for your Tableau account from your Tableau Cloud entity ID. Get the Tableau Cloud entity ID by logging in to Tableau and navigating to Settings > Authentication. Check Enable an additional authentication method, select SAML from the Authentication drop-down, and under the Tableau Cloud metadata section, copy the Tableau Online entity ID value. For example, if your Tableau Cloud entity ID is https://sso.online.tableau.com/public/sp/metadata/e6cac781-5781-4c64-b380-9728fde933d3, then your Account ID is e6cac781-5781-4c64-b380-9728fde933d3.
6. Under the Choose Capabilities tab, choose SSO and click Continue.
   General Settings of SSO configuration for Tableau.
7. Under Integration Settings, navigate to the Single Sign On tab and click Metadata Details. Download the metadata file to be uploaded during the configuration of Tableau in Identity360 by clicking Download from the Metadata field.
   Integration Settings of SSO configuration for Tableau.

Tableau (service provider) configuration steps

1. Log in to Tableau with admin privileges.
2. Navigate to Settings > Authentication.
3. Check Enable an additional authentication method and select SAML from the Authentication drop-down.
   Tableau SAML SSO setup.
4. Under the Tableau Cloud metadata section, copy the Tableau Online entity ID value. This will be used for entering the Account ID in step 5 of prerequisites.
   Obtaining the Tableau entity ID.
5. Under the Upload metadata to Tableau section, click Choose a file, and upload the metadata file you downloaded in step 7 of the prerequisites.
   Tableau SAML SSO configuration.
6. Under the Map attributes section, update the values in the IdP Assertion Name column as follows:
   • Username: Type NameID.
   • Select the First and Last name radio button.
   • First name: Type FirstName.
   • Last name: Type LastName.
7. Under the Choose default for embedded views section, select the Authenticate in a separate pop-up window radio button.
8. Click Save Changes.
   Mapping attributes for SSO In Tableau.

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or to direct you to a specific page after logging in.
3. Click Save.
   Integration Settings of SSO configuration for Tableau.
4. To learn how to assign users or groups to one or more applications, refer to this page.

Your users will now be able to sign in to Tableau through the Identity360 portal.