Configure SAML with Salesforce


If you’ve configured Salesforce as your SAML identity provider (IdP), use the information in this topic alongside the Salesforce documentation to add Tableau Cloud or Tableau Cloud Manager (TCM) to your single sign-on applications.

Notes: 

  • These steps reflect the Salesforce application and can change without our knowledge. If the steps described here do not match the screens you see in Salesforce, you can use the general SAML configuration steps, along with the Salesforce documentation.
  • Beginning February 2022, multi-factor authentication (MFA) with Salesfoce is a Tableau Cloud and Salesforce requirement.
  • The configuration steps in the IdP may be in a different order than what you see in Tableau Cloud or TCM.

Step 1: Configure SAML in Tableau Cloud or TCM

To configure the Salesforce application, you will need to use information in the Tableau Cloud or TCM SAML settings.

  1. Sign in to your Tableau Cloud site as a site administrator, and select Settings > Authentication.

  2. On the Authentication tab, click the New Configuration button, select SAML from the Authentication drop-down, and then enter a name for the configuration.

    Screen shot of Tableau Cloud site authentication settings -- new configuration page

    Note: Configurations created before November 2024 (Tableau 2024.3) can't be renamed.

Alternatively, in TCM, do the following:

  1. Sign in to TCM as a cloud administrator, and select Settings > Authentication.

  2. Select the Enable an additional authentication method check box, and select SAML from the Authentication drop-down.

  3. Click the Configuration (required) drop-down arrow.

Step 2: Configure "Tableau Cloud application" in your IdP

See the Salesforce documentation, Configure SSO from Salesforce to Tableau Cloud(Link opens in a new window).

Step 3: Add users to the SAML-enabled Tableau Cloud site or TCM

  1. After you complete the Salesforce configuration steps, return to your Tableau Cloud site or TCM.

  2. Complete the SAML configuration by adding the users you assigned in the Salesforce Application Profile Assignment page to Tableau Cloud or TCM by selecting existing Tableau Cloud or TCM users, or add new users you want to approve for SAML.

    When you add or import users, you also specify their authentication type. On the Users page, you can change users’ authentication type any time after adding them. For more information, see one of the following:

Back to top