KNOWLEDGE BASE

Missing "Sign Out" Option on Tableau Online Using SAML with Okta


Published: 06 Jun 2016
Last Modified Date: 24 Dec 2020

Issue

When authenticating to Tableau Online using SAML configured through Okta (IdP), the "Sign Out" option under your account name is missing. 

Environment

  • Tableau Online
  • SAML
  • Okta

Resolution

Reach out to Okta and request this feature capability. 

As a possible workaround, you can force Tableau Online to provide the option to logout while still being logged into the IdP. 
  1. Download the IdP metadata from Okta. 
  2. Add the below SingleLogoutService element to the metadata and save the file. 
  3. <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://online.tableau.com/wg/saml/logout/index.html"/>
  4. Upload the metadata file to Tableau Online, and select Apply.

Cause

Okta does not support single logout. The workaround will not function as true Single Logout, as it will only end the Tableau Online session, but not the session with Okta. 
Did this article resolve the issue?