Tableau SAML auth

[Cantor, Scott]

On 8/31/16, 3:07 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:

>    I was wondering if anybody has setup up Tableau SAML authentication with
>    the shibboleth idp before? I've found a few blog entries for people
>    using ADFS with it, but nothing for shibboleth.

It's SAML, whether it's ADFS or Shibboleth. The issue is what they require, not the details of how any given IdP happens to produce it.

> It says the username must be passed in an attribute named "username",
> but then it also says you can change the attribute name, which is a bit
> confusing :).

It's just badly worded. They're telling you that they aren't going to look at the NameFormat of the Attribute (which is a bug) and that you can configure it to accept any attribute Name you prefer if you tell it to, so if that's what you prefer to do (which makes sense), just determine which Attribute you would be using for the linked identifier value, and tell it to use that Name. If it turns out they don't support URI names, that would have to become clearer only after trying it and then you can switch to plan B.

> It also looks like it doesn't support encrypted assertions.

No, which is probably more common than supporting them at this point.

-- Scott