---
schema_version: "1"
id: 3ba890ce55a41994493046fcbc8f317a033d16994432f4e9e9763251559d6795
title: Set the User Authentication Type
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/online/users_set_auth_type.md
canonical_url: https://help.tableau.com/current/online/en-gb/users_set_auth_type.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 1c44c978332bd7aca51a99706b63be88ba746d166e6978c1d5009bf7f51ebb37
description: Set the authentication method for users on a Tableau Cloud site.
---
[Skip to main content](#main-content)

# Set the User Authentication Type

On a Google, OIDC, Salesforce or SAML-enabled siteor Tableau Cloud Manager (TCM) tenant, site or cloud administrators can specify users’ authentication method. For example, which users can access Tableau Cloud or TCM using their single sign-on (SSO) credentials.

You can assign an authentication method at the time you add users to Tableau Cloud, as well as any time afterwards.

**For Tableau Cloud**

1. When you’re signed in to the Tableau Cloud site, select **Users**.
2. On the Users page, select the tick boxes next to the users whose authentication type you want to assign or change.
3. On the Actions menu, select Authentication.
    
    ![An actions menu with the option for authentication.](/tableau/current/en-gb/online/en-gb/Img/users_set_authentication.png)
4. In the Authentication dialogue box, select the authentication method or Tableau with MFA.

**For TCM**

1. When you’re signed in to the TCM, select **Users**.
2. On the Users page, select the filter icon on the left-hand side of the page and select the Show only Cloud Administrators tick box.
3. Select tick boxes next to the users whose authentication type you want to assign or change.
4. On the Actions menu, select Site Membership.
5. In the Site Membership dialog box, under the Authentication for Tableau Cloud Manager drop-down menu, select the authentication method or Tableau with MFA.

## Notes

- In Tableau Cloud, if the authentication for the site changes, you'll see a warning symbol in the Authentication column on the Users page when a user is assigned that authentication method. Starting in January 2025 (Tableau 2024.3), if a user is assigned to an authentication method whose configuration is deleted, you'll see ‘Undefined’ in the Authentication column for that user.
    
    **Note:** You might also see ‘Undefined’ if the `authSetting` attribute was used instead of the `idpConfigurationId` attribute when assigning an authentication method to a user using the Tableau REST API. For more information, see [Add User to Site](https://help.tableau.com/current/api/rest_api/en-gb/REST/rest_api_ref_users_and_groups.htm#add_user_to_site) and [Update User](https://help.tableau.com/current/api/rest_api/en-gb/REST/rest_api_ref_users_and_groups.htm#update_user) methods in the Tableau REST API Help.
- If you change users’ authentication from Tableau with MFA to Google, the next time they sign in, they will be directed to your identity provider’s site to provide their credentials.
- If users were signing in using their external IdP credentials, and you change their authentication type to Tableau with MFA, if they do not have existing Tableau credentials, they will receive an email from Tableau with instructions for creating new Tableau credentials.
- Tableau recommends that you dedicate a site admin or cloud admin account that is always configured for Tableau with MFA authentication. In the event of an issue with your IdP, a dedicated Tableau account ensures that you always have access to your site or tenant.
- See [Multi-Factor Authentication and Tableau Cloud](https://help.tableau.com/current/online/en-gb/to_security_mfa.htm) for more information about the Tableau with MFA authentication option.