KNOWLEDGE BASE

Missing "Sign Out" Option on Tableau Cloud Using SAML with Okta


Published: 06 Jun 2016
Last Modified Date: 08 Jun 2022

Issue

When authenticating to Tableau Cloud using SAML configured through Okta (IdP), the "Sign Out" option under your account name is missing. 

Environment

  • Tableau Cloud
  • SAML
  • Okta

Resolution

Reach out to Okta and request this feature capability. 

As a possible workaround, you can force Tableau Cloud to provide the option to logout while still being logged into the IdP. 
  1. Download the IdP metadata from Okta. 
  2. Add the below SingleLogoutService element to the metadata and save the file. 
  3. <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://online.tableau.com/wg/saml/logout/index.html"/>
  4. Upload the metadata file to Tableau Cloud, and select Apply.

Cause

Okta does not support single logout. The workaround will not function as true Single Logout, as it will only end the Tableau Cloud session, but not the session with Okta. 
Did this article resolve the issue?