Pricing  Get Quote
 
 

How to configure SAML single sign-on for Tableau

ADSelfService Plus supports Active Directory (AD)-based single sign-on (SSO) for Tableau logins and many other SAML-enabled enterprise applications. When Tableau SAML SSO is enabled, users only have to log in to ADSelfService Plus, the identity provider, once. After logging in, users can securely access their Tableau account without having to enter their usernames and passwords again.

ADSelfService Plus supports both identity provider (IdP) and service provider (SP)-initiated SSO for Tableau.

IdP-initiated Tableau SSO: Users need to log in to the ADSelfService Plus user portal first, and then click  Tableau in the Applications tab to access Tableau.

SP-initiated Tableau SSO: Users can access their Tableau domain via a URL or bookmark. They will automatically be redirected to the ADSelfService Plus portal for login. Once they log in, they'll be automatically redirected and logged into the Tableau portal.

Follow this guide for setting up Tableau SSO logins

Configuring your Active Directory domain in ADSelfService Plus

Get the detailed steps here.

Getting the Tableau SAML SSO details from ADSelfService Plus

  1. Log in to ADSelfService Plus with admin credentials.
  2. Go to the Applications tab → Add Application,  and select Tableau from the applications displayed.

    tableau-configuration

  3. Enter the Application Name and Description.
  4. Check the Enable Single Sign-On box.
  5. Enter the Domain Name of your Tableau account. For example, if you use johndoe@tableau.com to log in to Tableau, then tableau.com is the domain name.
  6. Enter the Account ID for your Tableau account. Get the Tableau Online entity ID from step 13.
  7. Click Add Application.
  8. In the pop-up that appears, download the Metadata file, and save it.

    tableau-identity-provider-details

  9. Configuring SSO settings in Tableau

  10. Log in to Tableau using admin credentials.
  11. Navigate to Settings → Authentication.

    configuring-sso-authentication

  12. Select Enable an additional authentication method.
  13. Select SAML, and click Edit Connection.
  14. Copy the Tableau Online entity ID. Use it as the Account ID in step 6.

    getting-the-entity-id

  15. In the Import metadata file into Tableau Online section, click Browse, and select the metadata file you saved in step 8.

    import-metadata-into-tableau

  16. In the Match attributes section, update the values in the IdP Assertion Name column as follows: 
    • Email: Type email
    • Select the First name, Last name radio button.
    • First name: Type firstname
    • Last name: Type lastname
  17. On the Parameters page, make sure the values appear as follows:
    Tableau Online field Value
    Email Email
    Email (attribute) Email
    First Name First Name
    Last Name Last Name
  18. Go to the Users tab, select a user, then select Actions → Authentication.

    tableau-user-enforcement

  19.  
  20. Now select the newly selected SSO configuration. Click Update.
  21.  
  22. Switch to the ADSelfService Plus portal. Go to the Applications tab and click the Edit icon adjacent to the Tableau app.
  23.  
  24. Enter the Tableau Online entity ID from step 13.

Your users can now log in to their Tableau accounts automatically using single sign-on.

Highlights

Password self-service

Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console. 

One identity with Single sign-on

Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus! 

Password/Account Expiry Notification

Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.

Password Synchronizer

Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more. 

Password Policy Enforcer

Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.

Directory Self-UpdateCorporate Search

Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.

ADSelfService Plus trusted by

A single pane of glass for complete self service password management