Missing "Sign Out" Option on Tableau Cloud Using SAML with Okta

Issue

When authenticating to Tableau Cloud using SAML configured through Okta (IdP), the "Sign Out" option under your account name is missing.

Environment

Tableau Cloud
SAML
Okta

Resolution

Reach out to Okta and request this feature capability.

As a possible workaround, you can force Tableau Cloud to provide the option to logout while still being logged into the IdP.

Download the IdP metadata from Okta.
Add the below SingleLogoutService element to the metadata and save the file.
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://online.tableau.com/wg/saml/logout/index.html"/>
Upload the metadata file to Tableau Cloud, and select Apply.

Cause

Okta does not support single logout. The workaround will not function as true Single Logout, as it will only end the Tableau Cloud session, but not the session with Okta.