Site-Specific SAML Authorization Fails And Redirects to Tableau Online Login Page

Issue

When you try to log in to Tableau Server using site-specific SAML authorization, the authorization fails and you are redirected to a Tableau Online login page with the URL for your server.

Additionally, the following error may be found In the SAML Service logs:

ERROR o.o.x.s.k.p.InlineX509DataProvider - Error extracting certificates from X509Data
java.security.cert.CertificateException: Unable to decode X.509 certificates
at org.opensaml.xml.security.x509.X509Util.decodeCertificate(X509Util.java:354)

Environment

Tableau Server 10.0.0
Site-Specific SAML

Resolution

Remove any extraneous data from the SAML/SSL certificates. There should be no text above the "BEGIN CERTIFICATE" message or below the "END CERTIFICATE" message.