CODEWITHSUNDEEP
single-sign-ontableau-apisaml-2.0auth0auth0-lock
Dmytro Kriat
Dmytro Kriat

Reputation: 1

Issue with logout from Tableau Online SAML when using Auth0 Identity provider

We are using Tableau Online to integrate reports into our website. We are using Auth0 as SAML SSO Identity provider for Tableau.

We have an issue with Logout from Tableau when logging out from our website (via Auth0). When non-tableau user (not defined on tableau side) logs into our website after tableau user logged out, he can still see Tableau report on our website (instead of Tableau login prompt). This only happens in the same browser instance.

We integrated Auth0 with Tableau as described in the following article configuring auth0 as sso idp for tableau

We use IdP-initiated SLO (Auth0 logout call) and since Tableau doesn’t support it regarding Tableau requirements, we are not able to logout from Tableau.

To use SP-initiated SLO to comply with Tableau requirements, it looks like it is needed to logout from Tableau Online explicitly. But that is not the option for us, because users, that will be seeing Tableau report on our web-site may not even know, that they have accounts on Tableau side and that they need to explicitly logout from Tableau.

We tried to use Tableau REST API logout endpoint to logout user from Tableau after Auth0 logout, but it didn’t help (204 status code was returned, but user was not logged out from Tableau).

We also tried to et the callback URL to this (it's Tableau logout URL) in Auth0 SAML addons and changed the binding value from Redirect To Post to call logout method of the Tableau. - didn't help

  "logout": {
    "callback": "https://prod-useast-b.online.tableau.com/wg/saml/SingleLogout/index.html"
  },
  "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Post"

Tableau logout endpoint

Then we tried to add logic to clear local storage, session storage, and cookies to remove auth0, tableau, and application data but still nothing changed, and the application sees the previous session of Tableau.

We are using the Tableau Lock logout method, it works correctly, and also we can see it in Auth0 logs, but it's not logging out from Tableau and not removing the Tableau session.

We need suggestions on how we can properly logout from Tableau session from our website.

Upvotes: 0

Views: 306

Answers (0)

Related Questions