KNOWLEDGE BASE

Can not change user authentication type to Site-SAML due to error "Site SAML users can only belong to one site"


Published: 14 Aug 2022
Last Modified Date: 18 Aug 2022

Issue

Can not change user authentication type from Server SAML to Site-SAML due to error "Site SAML users can only belong to one site", the system shows the user belongs to more than one site even though he just belongs to only one site actually.

Environment

  • Tableau Server

Resolution

  1. Login with another [Server Administrator] or [Site Administrator Creator] user.
  2. Move all the contents from the issued users to current [Server Administrator] or [Site Administrator Creator] user. (note: As a function designed, flows can only be moved to current [Server Administrator] or [Site Administrator Creator], this is why you need to login with [Server Administrator] or [Site Administrator Creator] user).
  3. Select 'Manage all sites' > 'Users', filter for the issued users and select 'Site Membership'
  4. Check the checkbox 'Selected users are Server Administrators' to change the issued users a  Server Administrator on all the sites. 
  5. Try to delete the issued users account. (note: please make customer know that the current personal access token of the issued users will also be removed)
  6. Add the issued users to the correct site again.
  7. Try to change user authentication type to Site-SAML again.
  8. Move all the contents back to each issued users. (note: As a function designed, Flows can only be moved back to each user by itself).
  9. If the issued users used personal access tokens, ask them to re-create them if needed.

Cause

The user may have previously been a Server Administrator. From the [All sites]-[Users], it shows that it belongs to more than one sites, which does not match its actual status like below:

User-added image
Did this article resolve the issue?