Updating Certificates for SAML With Tableau Server and ADFS

Option 1

Option 2

Option 3

If the Tableau Server key/certificate has changed:

1. Open TSM in a browser:
   https://<tsm-computer-name>:8850. For more information, see Sign in to Tableau Services Manager Web UI.
2. On the Configuration tab, select User Identity & Access, and then select the Authentication Method tab.
3. For Authentication Method, select SAML.
4. In the SAML section that appears update the SAML certificate and key files— Click Select File to upload each of these files. 
   If you are using a PKCS#8 passphrase-protected key file, you must enter the passphrase with TSM CLI:

   tsm configuration set -k wgserver.saml.key.passphrase -v <passphrase>

5. Scroll to the bottom and click Save Pending Changes after you've entered the new certificate and key file.
6. Click Pending Changes at the top of the page
7. Click Apply Changes and Restart.
8. Add the new certificate to the relying party information in ADFS, replacing the old one.

Option 4

If the ADFS key/certificate has changed:

1. Export metadata from ADFS.
2. Open TSM in a browser and enter the following:

   https://<tsm-computer-name>:8850. 

   For more information, see Sign in to Tableau Services Manager Web UI.
3. On the Configuration tab, select User Identity & Access, and then select the Authentication Method tab.
4. For Authentication Method, select SAML.
5. For Step 4 in the GUI, enter the path to the new ADFS metadata XML file, and then click Select File.
6. Scroll to the bottom and click Save Pending Changes after you've entered the new certificate and key file.
7. Click Pending Changes at the top of the page
8. Click Apply Changes and Restart.