Missing "Sign Out" Option on Tableau Online Using SAML with Okta

Issue

When authenticating to Tableau Online using SAML configured through Okta (IdP), the "Sign Out" option under your account name is missing.

Environment

Tableau Online
SAML
Okta

Resolution

Reach out to Okta and request this feature capability.

As a possible workaround, you can force Tableau Online to provide the option to logout while still being logged into the IdP.

Download the IdP metadata from Okta.
Add the below SingleLogoutService element to the metadata and save the file.
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://online.tableau.com/wg/saml/logout/index.html"/>
Upload the metadata file to Tableau Online, and select Apply.

Cause

Okta does not support single logout. The workaround will not function as true Single Logout, as it will only end the Tableau Online session, but not the session with Okta.