Applies to: Tableau Cloud, Tableau Server

When embedded content fails to display in your custom application or Tableau REST API authorization fails, you can use a browser’s developer tools to inspect and identify error codes that might be associated with the Tableau connected app that’s used to display the embedded content.

Refer to the table below to review the description of the error code and potential resolution.

Error code Summary Description Potential resolution or explanation
5 SYSTEM_USER_NOT_FOUND Tableau user could not be found To resolve this issue, verify the 'sub' (Subject) claim value in the JWT is the user name (email address) of the authenticated Tableau Cloud user. This value is case sensitive.
16 LOGIN_FAILED Login failed This error is typically caused by one of the following claim issues in the JWT:
  • The 'exp' (Expiration Time) exceeds the default maximum validity period. To resolve this issue, review registered claims(Link opens in a new window) required for a valid JWT and ensure the correct value does not exceed 10 minutes.
  • The 'sub' (Subject) is calling an unknown user. To resolve this issue, verify the 'sub' value is the user name (email address) of the authenticated Tableau Cloud user.
126 CONNECTED_APP_NOT_FOUND The connected app could not be found To resolve this issue, verify the connected app is enabled and the correct client ID (also known as the connect app ID) is referenced in the JWT.
127 CONNECTED_APP_SECRET_NOT_FOUND The connected app's secret could not be found To resolve this issue, verify the correct connected app's secret ID and secret value are referenced in the JWT.
128 CONNECTED_APP_SECRET_LIMIT_EXCEEDED Maximum limit for secrets has been reached A maximum of two secrets are allowed for a connected app. This error can occur when there's an attempt to create a third secret.

To resolve this issue, delete a secret from the connected app before creating a new one.
133 INVALID_CONNECTED_APP_DOMAIN_SAFELIST Domain allowlist contains one or more invalid characters This error can occur when the domain allowlist contains one or more invalid characters.
10083 BAD_JWT JWT header contains issues This error is typically caused by one of the following issues with the JWT header:
  • The 'kid' (Secret ID) or 'clientId' (Issuer) claims are missing from the JWT header. To resolve this issue, ensure this information is included.
  • The JWT is unsigned or encrypted. Tableau does not support unsigned or encrypted JWTs.
10084 JWT_PARSE_ERROR JWT contains issues

To resolve this issue, verify the following:

  • The 'aud' (Audience) value referenced in the JWT uses the "tableau" value. This value is case sensitive.
  • The 'aud' (Audience) and 'sub' (Subject) are included in the JWT.
10085 COULD_NOT_FETCH_JWT_KEYS JWT could not find keys Could not find the secret.

To resolve this issue, verify the correct keyId (Kid) is used in the JWT header.

10089 CONNECTED_APP_NOT_FOUND Could not find connected app To resolve this issue, ensure the issuer is calling the correct connected app ID (also known as the client ID).
10090 CONNECTED_APP_DISABLED Connected app is disabled The connected app used to verify trust is disabled. To resolve this issue, enable the connected app.
10091 JTI_ALREADY_USED Unique JWT required The JWT has already been used in the authentication process. To resolve this issue, a new JWT must be generated.
10094 MISSING_REQUIRED_JTI Missing JWT ID To resolve this issue, verify the 'jti' (JWT ID) is included in the JWT.
10096 JWT_EXPIRATION_EXCEEDS_CONFIGURED_EXPIRATION_PERIOD   The 'exp' (Expiration Time) exceeds the default maximum validity period. To resolve this issue, review registered claims(Link opens in a new window) required for a valid JWT and ensure the correct value does not exceed 10 minutes.
10098 JWT_UNSIGNED_OR_ENCRYPTED JWT is unsigned or encrypted Tableau does not support an unsigned or encrypted JWT.
10099 SCOPES_MISSING_IN_JWT Missing scopes claim The JWT is missing the required 'scp' (scope) claim. To resolve this issue, verify 'scp' is included in the JWT. For troubleshooting help with a JWT, see Debugger(Link opens in a new window) on the auth0 site.
10100 JTI_PERSISTENCE_FAILED Unexpected JWT ID error There was a unexpected 'jti' (JWT ID) error. To resolve this issue, a new JWT with a new 'jti' must be generated.
Back to top
Thanks for your feedback!