Loading

Tableau Server With Proxy Or Azure Waf Fails To Authenticate With An Endless Loop In The Url

Date de publication: Apr 29, 2026
Description
Tableau Server with a proxy and/or Azure host with a configured SSO option (e.g. OpenID) is unable to sign users in. The signin/URL continues in loop. The suffix '/#/signin' or similar will appear and disappear in the URL, and the user will not be able to login.

 

Cause

The proxy or the Azure WAF is changing the XSRF cookie so that the SSO (Single Sign On)process fails to complete.
Résolution
Work with your IT team to ensure that the XSRF (Cross-Site Request Forgery Prevention) cookie is not being changed, replaced or removed by the proxy or the Azure WAF.
Ressources supplémentaires
You may see the following error in vizportal log if the token is changed by the proxy or Azure WAF.
"Xsrf cookie in request does not match token from header. Cookie invalid."
Numéro d’article de la base de connaissances

001471644

 
Chargement
Salesforce Help | Article