Loading
Salesforce now sends email only from verified domains. Read More

ForceAuthn in SAML AuthnRequest behaviour in Tableau Cloud.

Publish Date: May 6, 2026
Description

Users are being prompted to re-login every 2 hours on Tableau Cloud despite having a valid IdP session. 

Resolution

Understand that Tableau Cloud sends SAML AuthnRequests with ForceAuthn="true" when its 2-hour session expires. This is an intentional design to trigger a verified re-authentication at the IdP.

Note that there is currently no tenant-level or site-level setting in Tableau Cloud to disable ForceAuthn for SAML Service Providers, preventing silent re-authentication..

Knowledge Article Number

005321733

 
Loading
Salesforce Help | Article