KNOWLEDGE BASE

Tableau Online MFA (multi-factor authentication) FAQ


Published: 31 Aug 2021
Last Modified Date: 10 Sep 2021

Question

Tableau Online MFA (multi-factor authentication) FAQ
 

Environment

  • Tableau Online

Answer


Q1. Where to find public information about Tableau Online MFA requirement ?
all public information can be found below. most of questions are already answered in below documents. please review these documents before raising tickets to Tech-support.
  • Salesforce FAQ:
    • https://help.salesforce.com/s/articleView?id=000352937&type=1
  • Tableau Online product help
    • https://help.tableau.com/current/online/en-us/to_security_mfa.htm
  • Tableau Community site
    • https://community.tableau.com/s/feed/0D54T00000k67bISAQ
  • Tableau Knowledge Base
    • https://kb.tableau.com/articles/issue/Unable-to-Enable-Multi-Factor-Authentication-MFA-for-Tableau-Online
Q2. How to meet the MFA requirement ?
for SSO authentication (such as SAML, Google, Salesforce), enable MFA function with your identity provider (idP). please consult your IT team or identity provider (idP)
for Tableau ID authentication, utilize our new authentication type, “Tableau with MFA”.
refer to Multi-Factor Authentication and Tableau Online
Q3. Is MFA required for single sign-on (SSO)?
Yes, When SSO is enabled, customers must enable MFA with their identity provider (idP). 
refer to Is MFA required for single sign-on (SSO)? 
Q4. Is mobile device needed when enable "Tableau with MFA" function ? can we use SMS, Email or Phone call methods for MFA ?
Mobile device is needed (in order to use authenticator APP) to use "Tableau with MFA" function.
SMS, Email or Phone call methods are not supported.
refer to Can we use email, SMS, or phone calls for MFA?
Q5. What is Best practices for site admin accounts ?
Q6. What is Recovery Code ? Is it able to use recovery code as normal daily login method ?
No, can not use recovery code as daily login method, because it is a list of ten one-time use codes, can only be used as backup method when in a locked-out scenario.
refer to About recovery codes
Q7. How to use recovery code to login to Tableau Online ?
(For Salesforce Authenticator)
in the Salesforce Authenticator APP, Select [did not receive the notification]> [Choose another authentication method]> [Recovery code]. Enter any unused recovery code out of the 10 recovery codes and click [Validate].
Q8. What happens if we can't meet the MFA requirement deadline?
refer to 
What happens if we can't meet the MFA requirement deadline?
Multi-Factor Authentication (MFA) Enforcement Roadmap
Over the next year, we will incrementally remove the plain “Tableau" auth type from Tableau Online, so that customers will only be forced to use MFA if they are using native Identity/Authentication functionality. Please see The MFA Enforcement Roadmap for the latest projections on dates for enforcement. We suggest to start preparing for MFA enforcement now, and encourage customers to reach out to their Account Managers with any questions.
Q9. What do I need to do with other Tableau products in order to use the new "Tableau with MFA" authentication type?
  • Tableau Desktop, Tableau Prep Builder, Tableau Bridge
please upgrade to  2021.1+ versions
  • Command line tools (tabcmd, Tableau Prep Builder command line, Tableau Desktop Data Extract command line)
Tableau Development team is working on solutions, please wait for announcement.
Note: if change user account's (which is used in scripts) auth type to "Tableau with MFA", these scripts will fail to login to Tableau Online and causing run failure.
  • REST API
please use PAT(Personal Access Token) to login to Tableau Online.
refer to Signing In and Signing Out (Authentication) and Make a Sign In Request with a Personal Access Token
Did this article resolve the issue?