---
schema_version: "1"
id: d39d78d2d20b84ca544cf31724c09d5ecfd4ae2cb9cee9e436249d08c0da5ed1
title: Configure SAML with Salesforce
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/online/saml_config_salesforce.md
canonical_url: https://help.tableau.com/v0.0/online/en-gb/saml_config_salesforce.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 2e064ff5cf6e38eb74623f7099d235fef55e0dd1c7646bc1a47aab28cc5313ee
description: Configure Salesforce as a SAML identity provider for Tableau Cloud or TCM.
---
[Skip to main content](#main-content)

# Configure SAML with Salesforce

If you’ve configured Salesforce as your SAML identity provider (IdP), use the information in this topic alongside the Salesforce documentation to add Tableau Cloud or Tableau Cloud Manager (TCM) to your single sign-on applications.

**Notes:** 

- These steps reflect the Salesforce application and can change without our knowledge. If the steps described here do not match the screens you see in Salesforce, you can use the general [SAML configuration steps](https://help.tableau.com/current/online/en-gb/saml_config_site.htm#SAML), along with the Salesforce documentation.
- Beginning February 2022, multi-factor authentication (MFA) with Salesfoce is a Tableau Cloud and Salesforce requirement.
- The configuration steps in the IdP may be in a different order from the one you see in Tableau Cloud or TCM.

## Step 1: Configure SAML in Tableau Cloud or TCM

To configure the Salesforce application, you’ll need to use information in the Tableau Cloud or TCM SAML settings.

1. Sign in to your Tableau Cloud site as a site administrator, and select Settings > Authentication.
2. On the Authentication tab, click the New Configuration button, select SAML from the Authentication drop-down and then enter a name for the configuration.
    
    ![Screen shot of Tableau Cloud site authentication settings – new configuration page](/tableau/next/en-gb/online/en-gb/Img/saml_config_site3.png)
    
    **Note:** Configurations created before January 2025 (Tableau 2024.3) can't be renamed.

Alternatively, in TCM, do the following:

1. Sign in to TCM as a cloud administrator, and select Settings > Authentication.
2. Select the Enable an additional authentication method tick box, and select SAML from the Authentication drop-down.
3. Click the Configuration (required) drop-down arrow.

## Step 2: Configure "Tableau Cloud application" in your IdP

To integrate a service provider with your Salesforce org, use an external client app that implements SAML 2.0. For more information, see [Configure the External Client App’s SAML 2.0 Settings and Policies](https://help.salesforce.com/s/articleView?id=xcloud.configure_external_client_app_saml.htm&type=5) in the Salesforce Help.

Alternatively, you can follow the steps described in [Configure SSO from Salesforce to Tableau Cloud](https://help.salesforce.com/articleView?id=identity_provider_examples_tableau_online.htm&type=5) (deprecated) if Salesforce-connected apps are still available to you.

## Step 3: Add users to the SAML-enabled Tableau Cloud site or TCM

1. After you complete the Salesforce configuration steps, return to your Tableau Cloud site or TCM.
2. Complete the SAML configuration by adding the users you assigned in the Salesforce Application Profile Assignment page to Tableau Cloud or TCM by selecting existing Tableau Cloud or TCM users, or add new users you want to approve for SAML.
    
    When you add or import users, you also specify their authentication type. On the Users page, you can change users’ authentication type at any time after adding them. For more information, see one of the following:
    
    - [Add Users to a Site](https://help.tableau.com/v0.0/online/en-gb/sites_addusers.htm) or [Import Users](https://help.tableau.com/v0.0/online/en-gb/users_import.htm) topic for Tableau Cloud
    - [Manage Users With Tableau Cloud Manager](https://help.tableau.com/v0.0/online/en-gb/cloud_manager_users.htm) topic for TCM