Overview

Single Sign-On (SSO) lets users access multiple applications with one set of credentials. It reduces password fatigue, improves security, and makes it easier for organizations to manage user accounts across different systems. Many businesses use WordPress as the main portal where users sign in to access services and resources.
These same users often need to open Tableau Cloud to view dashboards and reports. Without SSO, they're forced to log in again, which slows them down, interrupts analysis, and increases support requests for password related issues.
The miniOrange WordPress SAML IDP Plugin solves this by allowing WordPress to act as a SAML Identity Provider. After users sign in to WordPress, the plugin generates a secure SAML 2.0 response that Tableau Cloud accepts to verify their identity. This gives users seamless access to Tableau dashboards without re-authentication, while ensuring secure and controlled access to sensitive analytics content.

Scenario

Let’s say an organization is expanding its digital operations, and WordPress serves as the centralized user portal where customers and internal users begin their daily tasks. It’s the place where they access their accounts, services, and the tools they use every day.
As part of their workflow, users often move from WordPress to Tableau Cloud to view dashboards, track performance, and review business reports. Managing separate Tableau credentials juggling multiple passwords, and dealing with repeated logins slows them down and disrupts their momentum.

To streamline login access, the organization wants to:

• Use WordPress as the primary authentication system.
• Allow users to reach Tableau Cloud in one click after WordPress login.
• Eliminate duplicate Tableau Cloud accounts and password management.
• Protect analytics with strict, role‑based authorization controls.

Prerequisites

To support this use case, the following must be in place:

• Single Sign-On (SSO) from WordPress to Tableau Cloud
• WordPress to function as the SAML Identity Provider (IDP)
• Tableau Cloud to function as the SAML Service Provider (SP)
• Secure transmission of user identity using SAML 2.0
• Centralized user management within WordPress

WordPress SAML IDP Plugin

The miniOrange WordPress SAML IDP plugin allows WordPress to act as a SAML Identity Provider (IDP) by handling user login and generating signed SAML assertions. After users sign in, the plugin creates a SAML 2.0 response containing their identity details, which Tableau Cloud reads to recognize the user and allow access to their dashboards.

The plugin supports:

• SAML 2.0 authentication
• Attribute mapping
• Secure certificate-based signing
• Compatibility with enterprise Service Providers (SPs) such as Tableau Cloud

Our Solution

The solution is implemented by configuring WordPress as a SAML Identity Provider (IDP) and Tableau Cloud as a Service Provider (SP).
Once users authenticate on WordPress, the same session carries over to Tableau Cloud, giving them access to their dashboards without an additional login.

User Flow

When a user attempts to access Tableau Cloud, one of the following scenarios occurs:

1. User is Already Logged into WordPress
   • The user logs into the WordPress site using existing credentials.
     
   • The user clicks a link or button to access Tableau Cloud.
   • WordPress generates a signed SAML Response containing the user’s identity.
   • Tableau Cloud validates the SAML Response.
   • The user is granted immediate access to Tableau dashboards without any additional login prompts.
     
2. User is Not Logged into WordPress
   • The user attempts to access a Tableau Cloud resource.
   • The user is redirected to the WordPress login page.
   • After successful authentication on WordPress, a SAML Response is generated.
   • The user is redirected back to Tableau Cloud and logged in automatically.

Solution Architecture

• Identity Provider (IDP): WordPress
• Service Provider (SP): Tableau Cloud
• Authentication Protocol: SAML 2.0
• User Store: WordPress

This architecture ensures a secure, scalable, and standards-based authentication flow.

Setup Overview

Configure Tableau Cloud as a Service Provider (SP)

• Enable SAML authentication in Tableau Cloud.
• Upload IDP metadata or certificates generated by WordPress.
• Configure Entity ID and Assertion Consumer Service (ACS) URL.

Test the SSO Flow

• Initiate login from WordPress to Tableau Cloud.
• Validate successful authentication and access.
• Confirm correct attribute mapping.

Production Deployment

• Apply the tested configuration to the production environment.
• Monitor authentication behavior and logs.

Conclusion

With our SAML IDP Plugin, organizations can successfully configure Single Sign‑On between WordPress and Tableau Cloud and give users a unified authentication experience. This removes the need for multiple credentials and makes access to Tableau Cloud more seamless for end users.
The integration also helps maintain consistent identity control within WordPress, ensuring that access to Tableau Cloud is tied to verified user accounts.
If you face any issues during configuration or need help adapting the integration to your environment, you can reach out to wpidpsupport@xecurify.com for assistance.