Tableau Cloud Help

On a Google, OIDC, Salesforce, or SAML-enabled site, administrators can specify users’ authentication method. For example, which users can access Tableau Cloud using their single sign-on (SSO) credentials.

You can assign authentication method at the time you add users to Tableau Cloud, as well as any time afterward.

1. When you’re signed in to the Tableau Cloud site, select Users.

2. On the Site Users page, select the check boxes next to the users you want to assign an authentication type.

3. On the Actions menu, select Authentication.

   

4. In the Authentication dialog box, select the authentication method or Tableau with MFA.

Notes

• If the authentication for the site changes, you'll see a warning symbol in the Authentication column on the Users page when a user is assigned that authentication method. Starting in November 2024 (Tableau 2024.3), if a user is assigned to an authentication method whose configuration is deleted, you'll see "Undefined" in the Authentication column for that user.

• If you change users’ authentication from Tableau with MFA to Google, the next time they sign in, they will be directed to your identity provider’s site to provide their credentials.

• If users were signing in using their external IdP credentials, and you change their authentication type to Tableau with MFA, if they do not have existing Tableau credentials, they will receive email from Tableau with instructions for creating new Tableau credentials.

• Tableau recommends that you dedicate a site administrator account that is always configured for Tableau with MFA authentication. In the event of an issue with your IdP, a dedicated Tableau account ensures that you always have access to your site.

• See Multi-Factor Authentication and Tableau Cloud for more information about the Tableau with MFA authentication option.