"Tableau Server could not authenticate you automatically" error occurs when attempting to automatically login using Kerberos SSO after Tableau Server upgrade

Published: 15 Aug 2023
Last Modified Date: 05 Sep 2023


After upgrading Tableau Server to a version released October 2022 or later, "Tableau Server could not authenticate you automatically" error occurs and users are unable to login automatically with Kerberos SSO.


Add support for the stronger AES128 and AES256 encryption types and remove both RC4 and 3DES encryption as they are no longer considered secure. See Understanding Keytab Requirements for more information.

NOTE: If your environment is using a Run as Service account for Tableau Server, one or both of the following options must be enabled on the user account in Active Directory, or the encryption type will default back to RC4:

  • This account supports Kerberos AES 128 bit encryption.
  • This account support Kerberos AES 256 bit encryption.
User-added image


Java was upgraded in Tableau Server versions released October 2022 or later. As a result, Tableau Server no longer supports RC4 or 3DES encryption types in keytabs. As such, you will see this error after upgrading to a newer version of Tableau Server while using an unsupported encryption type for Kerberos.

Additional Information

Identifying a match for this issue:

1. Confirm Tableau Server version matches list of impacted versions in Environment section above 

2. Review Tableau Server "vizportal" logs (see Tableau Server Logs and Log File Locations) to identify the following message: "Failure unspecified at GSS-API level (Mechanism level: Encryption type RC4 with HMAC is not supported/enabled)"
Did this article resolve the issue?