KNOWLEDGE BASE

OAuth Security Improvements Requiring Reauthentication in Tableau Cloud


Published: 21 Jan 2022
Last Modified Date: 08 Jun 2022

Issue

Due to security improvements being made for some OAuth authenticated data sources in Tableau Cloud, it will be necessary to reauthenticate in order to prevent disruption. 

If the resolution steps are not taken to prevent disruption, the following error will occur when accessing live views or refreshing extracts: 
 
Unable to connect to data source with the supplied credentials, or no credentials provided.
Tableau needs an unexpired OAuth refresh token to connect to the data. Ask your database administrator to issue a refresh token, then try again.  

Environment

Product
  • Tableau Cloud
Data sources
  • Google Big Query
  • Google Sheets
  • Google Analytics
  • Salesforce
  • Azure Data Lake connections
Analytics Extension
  • Einstein Discovery in Tableau

Resolution

All Impacted Data Sources
Update saved credentials for any impacted data sources (listed above) using the instructions in the Manage Saved Credentials for Data Connections article. All users with visualizations connected to the data sources listed above will need to reauthenticate starting February 8th, 2022.

Salesforce Connector or Einstein Discovery with API Access Control
If you use the Salesforce connector or Einstein Discovery and have Salesforce API Access Control that require apps to be allowlisted, please follow the steps in the Configure Salesforce connected app in Tableau Cloud article. Once this step has been completed Tableau Cloud will be able to authenticate with Salesforce.
 

Cause

Security improvements for some OAuth authenticated data sources in Tableau Cloud require users to reauthenticate.

Additional Information

Any live connections configured with Prompt User will present the error and require each user reauthenticate starting March 31st, 2022. If you would like to prevent users from encountering the error, each viewer of the content will need to follow the resolution steps before March 31st, 2022. 

To identify content owners and affected data sources, follow the below steps: 
  1. Login to Tableau Cloud using a Site Admin account. 
  2. Select Explore, and under the Explore menu, select All Data Sources.
  3. On the far right, select the filter icon to open the filter pane. 
  4. Under Data source type, select All data sources.
  5. Under Authentication, select Embedded in connection.
  6. Under Connection type, enter one of the affected data source types (e.g. Google BigQuery).
  7. Use the results in the Owner and Name columns to identify who to engage to reauthenticate the affected data sources.  
Did this article resolve the issue?