KNOWLEDGE BASE

Error "Login failed because this is not included in the IdP Response" Authenticating to Tableau Online Using Shibboleth


Published: 01 Sep 2016
Last Modified Date: 01 Sep 2016

Issue

When logging into Tableau Online using SAML with Shibboleth the following error might occur: 

The sign-in was unsuccessful. Try again. If you continue to get this message, capture the status information below, and send it to Tableau Support. 

The site is configured to use the "..." attribute as the username. Login failed because this is not included in the IdP Response. To fix this problem, the site admin must either choose the correct attribute or clear it to rely on the NameID.

Environment

  • Tableau Online
  • SAML
  • Shibboleth 

Resolution

Change the Email attribute on Tableau Online to match the URN used by Shibboleth to describe the user email. 
  1. Login to Tableau Online using a Site Admin user. 
  2. Select Settings and then the Authentication tab.
  3. Under Step 5 Match attributes, change the Identity Provider (IdP) Assertion Name from Email to the URN used by Shibboleth to describe the user email.
  4. Select Apply
Did this article resolve the issue?