Loading

How to Configure SAML When IdP Requires Tableau Entity ID and ACS URL

Julkaisupäivä: Jul 15, 2026
Edellytykset
Site Administrator access to Tableau Cloud, administrative access to the external Identity Provider (IdP) configuration portal, IdP that requires Tableau Cloud Entity ID and ACS URL before saving SAML configuration
Tehtävä

In Tableau Cloud, you can register multiple IdPs to a single site. Consequently, Tableau Cloud dynamically generates the unique, correct Entity ID and ACS URL for an IdP only after that IdP's metadata has been uploaded. This design creates a circular dependency if the external IdP strictly requires Tableau Cloud's metadata to initiate or save its own application setup.

To resolve the circular dependency between Tableau Cloud and the IdP, exchange the Entity ID and ACS URL using temporary values to establish SAML SSO.

Vaiheet
  1. In your IdP's SAML configuration screen, enter temporary URLs to save the settings and download the IdP metadata (XML file).
    For example, enter the following:
    1. Temporary Entity ID:  
      https://sso.online.tableau.com/public/sp/metadata?alias=12345
    2. Temporary ACS URL:  
      https://sso.online.tableau.com/public/sp/
  2. Navigate to the "2. Upload metadata to Tableau" section on the Tableau Cloud configuration screen, upload the IdP metadata file obtained in Step 1, and click Save and Continue.
  3. Once the screen proceeds to the "5. Get Tableau Metadata" section, copy the dynamically generated, correct Tableau Cloud Entity ID and Tableau Cloud ACS URL.
    Note: If you plan to use Single Logout or encrypted certificates, download the XML file via Export Metadata on the same screen.
  4. Return to your IdP's configuration screen, and overwrite the temporary URLs entered in Step 1 with the correct information obtained in Step 3, then save.
Lisäresurssit

For more information, see SAML in Tableau Help.

Knowledge-artikkelin numero

005388937

 
Ladataan
Salesforce Help | Article