KNOWLEDGE BASE

Site-Specific SAML Authorization Fails And Redirects to Tableau Online Login Page


Published: 28 Nov 2016
Last Modified Date: 30 Nov 2016

Issue

When you try to log in to Tableau Server using site-specific SAML authorization, the authorization fails and you are redirected to a Tableau Online login page with the URL for your server. 

Additionally, the following error may be found In the SAML Service logs:

ERROR o.o.x.s.k.p.InlineX509DataProvider - Error extracting certificates from X509Data
java.security.cert.CertificateException: Unable to decode X.509 certificates
    at org.opensaml.xml.security.x509.X509Util.decodeCertificate(X509Util.java:354)

Environment

  • Tableau Server 10.0.0
  • Site-Specific SAML

Resolution

Remove any extraneous data from the SAML/SSL certificates.  There should be no text above the "BEGIN CERTIFICATE" message or below the "END CERTIFICATE" message.

Cause

The Site-SAML certificate parser cannot process extraneous data within the certificate.
Did this article resolve the issue?