From fd084ace187ccf005a1bd9825e43d9c6b44bd439 Mon Sep 17 00:00:00 2001 From: Abraham Ingersoll <586805+aberoham@users.noreply.github.com> Date: Tue, 3 Feb 2026 12:19:04 +0000 Subject: [PATCH] Set authSetting when creating users via the Tableau REST API MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit AddUserToSite sets idpConfigurationId but never includes authSetting in the payload. The Tableau REST API requires authSetting to be explicit — without it, users default to "Tableau with MFA" regardless of IdP config. Co-Authored-By: Claude Opus 4.5 --- pkg/connector/user.go | 3 +++ pkg/tableau/client.go | 3 +++ 2 files changed, 6 insertions(+) diff --git a/pkg/connector/user.go b/pkg/connector/user.go index d2ce0fa..57ccc69 100644 --- a/pkg/connector/user.go +++ b/pkg/connector/user.go @@ -145,6 +145,9 @@ func (o *userResourceType) CreateAccount(ctx context.Context, accountInfo *v2.Ac } if idpID != "" { reqBody.IdpConfigurationId = idpID + reqBody.AuthSetting = "SAML" + } else { + reqBody.AuthSetting = "TableauIDWithMFA" } user, err := o.client.AddUserToSite(ctx, reqBody) diff --git a/pkg/tableau/client.go b/pkg/tableau/client.go index 6f870aa..d60f189 100644 --- a/pkg/tableau/client.go +++ b/pkg/tableau/client.go @@ -408,6 +408,9 @@ func (c *Client) AddUserToSite(ctx context.Context, user CreateUserRequest) (*Us if user.IdpConfigurationId != "" { userMap["idpConfigurationId"] = user.IdpConfigurationId } + if user.AuthSetting != "" { + userMap["authSetting"] = user.AuthSetting + } requestBody, err := json.Marshal(map[string]interface{}{ "user": userMap,