OAuth Security Improvements Requiring Reauthentication in Tableau Online

Issue

Due to security improvements being made for some OAuth authenticated data sources in Tableau Online, it will be necessary to reauthenticate in order to prevent disruption.

If the resolution steps are not taken to prevent disruption, the following error will occur when accessing live views or refreshing extracts:

Unable to connect to data source with the supplied credentials, or no credentials provided.
Tableau needs an unexpired OAuth refresh token to connect to the data. Ask your database administrator to issue a refresh token, then try again.

Environment

Product

Tableau Online

Data sources

Google Big Query
Google Sheets
Google Analytics
Salesforce
Azure Data Lake connections

Analytics Extension

Einstein Discovery in Tableau

Resolution

All Impacted Data Sources
Update saved credentials for any impacted data sources (listed above) using the instructions in the Manage Saved Credentials for Data Connections article. All users with visualizations connected to the data sources listed above will need to reauthenticate starting February 8th, 2022.

Salesforce Connector or Einstein Discovery with API Access Control
If you use the Salesforce connector or Einstein Discovery and have Salesforce API Access Control that require apps to be allowlisted, please follow the steps in the Configure Salesforce connected app in Tableau Online article. Once this step has been completed Tableau Online will be able to authenticate with Salesforce.

Cause

Security improvements for some OAuth authenticated data sources in Tableau Online require users to reauthenticate.

Additional Information

Any live connections configured with Prompt User will present the error and require each user reauthenticate starting March 31st, 2022. If you would like to prevent users from encountering the error, each viewer of the content will need to follow the resolution steps before March 31st, 2022.

To identify content owners and affected data sources, follow the below steps:

Login to Tableau Online using a Site Admin account.
Select Explore, and under the Explore menu, select All Data Sources.
On the far right, select the filter icon to open the filter pane.
Under Data source type, select All data sources.
Under Authentication, select Embedded in connection.
Under Connection type, enter one of the affected data source types (e.g. Google BigQuery).
Use the results in the Owner and Name columns to identify who to engage to reauthenticate the affected data sources.