Troubleshooting: Tableau OIDC Integration Fails When ACR Values Are Configured

Version Affected: All
 
 

Overview

A Tableau OpenID Connect (OIDC) integration with SecureAuth does not work when Tableau's vizportal.openid.essential_acr_values or vizportal.openid.voluntary_acr_values configuration keys are set.

Cause

Tableau's documentation allows specifying a list of essential and voluntary Authentication Context Class Reference (ACR) values for its OIDC identity provider using those two configuration keys. SecureAuth does not support ACR values, so it cannot return the reply Tableau expects when they're set. 

Resolution:

Edit the Tableau configuration and remove the vizportal.openid.essential_acr_values and vizportal.openid.voluntary_acr_values entries, so Tableau no longer requires an ACR value in SecureAuth's reply.

Special Considerations

See Tableau's own tsm configuration set Options documentation for the exact commands to remove these keys.


 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.