Set the User Authentication Type

On a Google, OIDC, Salesforce, or SAML-enabled siteor Tableau Cloud Manager (TCM) tenant, site or cloud administrators can specify users’ authentication method. For example, which users can access Tableau Cloud or TCM using their single sign-on (SSO) credentials.

You can assign authentication method at the time you add users to Tableau Cloud, as well as any time afterward.

For Tableau Cloud

  1. When you’re signed in to the Tableau Cloud site, select Users.

  2. On the Users page, select the check boxes next to the users whose authentication type you want to assign or change.

  3. On the Actions menu, select Authentication.

    An actions menu with the option for authentication.

  4. In the Authentication dialog box, select the authentication method or Tableau with MFA.

For TCM

  1. When you’re signed in to the TCM, select Users.

  2. On the Users page, select the filter icon on the left-side of the page and select the Show only Cloud Administrators check box.

  3. Select check boxes next to the users whose authentication type you want to assign or change.

  4. On the Actions menu, select Site Membership.

  5. In the Site Membership dialog box, under Authentication for Tableau Cloud Manager drop-down menu, select the authentication method or Tableau with MFA.

Notes

  • In Tableau Cloud, if the authentication for the site changes, you'll see a warning symbol in the Authentication column on the Users page when a user is assigned that authentication method. Starting in November 2024 (Tableau 2024.3), if a user is assigned to an authentication method whose configuration is deleted, you'll see "Undefined" in the Authentication column for that user.

  • If you change users’ authentication from Tableau with MFA to Google, the next time they sign in, they will be directed to your identity provider’s site to provide their credentials.

  • If users were signing in using their external IdP credentials, and you change their authentication type to Tableau with MFA, if they do not have existing Tableau credentials, they will receive email from Tableau with instructions for creating new Tableau credentials.

  • Tableau recommends that you dedicate a site admin or cloud admin account that is always configured for Tableau with MFA authentication. In the event of an issue with your IdP, a dedicated Tableau account ensures that you always have access to your site or tenant.

  • See Multi-Factor Authentication and Tableau Cloud or for more information about the Tableau with MFA authentication option.