This error ("Your account or password is incorrect") during SAML login with Keycloak as IdP and Tableau Online commonly means the SAML assertion does not map to a valid Tableau username, or the required SAML attributes (especially NameID) are missing or incorrect[1][2][3][4].

Likely Causes & Solutions

1. NameID Attribute Must Match Tableau Username

• Tableau Online requires the SAML response to include the NameID attribute set to the exact Tableau username for the user[1][2].
• Even if you mapped "username" in Keycloak, make sure the SAML assertion actually sends NameID as the principal attribute, either as the username or email that Tableau expects.

2. Username Mismatch

• The username sent by Keycloak as NameID might not match the Tableau Online username field (case sensitivity and whitespace matter)[3][5].
• Double-check both Keycloak user profile and Tableau Online user settings for an exact match.

3. Attribute Mapping Issues

• Simply adding a map for “username” isn’t enough; the IdP SAML response must explicitly set the NameID attribute in the assertion[1][2].
• In Keycloak, verify under your SAML client mappers that you’ve created a Mapper:
  • Mapper type: "User Attribute"
  • User Attribute: username
  • SAML Attribute Name: NameID
  • SAML Attribute NameFormat: unspecified or basic (depends on Tableau config)

4. SAML Assertion Format

• Tableau expects HTTP-POST binding with the right format for SAML assertions[3][6].
• Make sure you’re not using redirect or SOAP binding; use POST only in your Keycloak SAML client.

5. Browser Cache or Session Conflict

• Occasionally, authentication failures can be due to browser cache or stale cookies.
• Try clearing your browser cache and cookies, then retry login[7].

6. Other Required Attributes

• Double-check if Tableau Online expects additional attributes (like email or groups) and verify all mappings are correct[1].

Action Checklist:

• Re-confirm the Tableau Online username is exactly the same as the Keycloak NameID value.
• In Keycloak, edit the SAML client and mappers to ensure NameID is sent with username.
• Try logging in with a new browser session after clearing cookies.
• Check Tableau Online's SAML authentication log for detailed errors—often it gives clarity if the username mapping is the issue[3][8].
• If you use email for usernames, ensure that Tableau is configured to accept that (or change to match the login format).
• Re-import metadata if you change mapping settings in Keycloak.

These troubleshooting steps address the vast majority of identity mapping errors when enabling SAML authentication for Tableau Online with Keycloak[2][3][1][4].

Sources [1] Enable SAML Authentication on a Site or TCM - Tableau Help https://help.tableau.com/current/online/en-us/saml_config_site.htm [2] Troubleshoot SAML - Tableau Cloud Help https://help.tableau.com/current/online/en-us/saml_trouble.htm [3] Troubleshoot SAML - Tableau Help https://help.tableau.com/current/server/en-us/saml_trouble.htm [4] Tableau SAML (Your account or password is incorrect) Tableau SAML (Your account or password is incorrect) [5] Incoming SAML message has no valid value for username attribute. https://community.tableau.com/s/question/0D54T00000C6avBSAR/incoming-saml-message-has-no-valid-value-for-username-attribute [6] How to Configure SAML SSO with Keycloak - Last9 https://last9.io/blog/how-to-configure-saml-sso-with-keycloak/ [7] Error "Your account or password is incorrect." Trying to Login to ... https://help.salesforce.com/s/articleView?id=001496856&language=en_US&type=1 [8] Tableau Server SAML Help! - Reddit https://www.reddit.com/r/tableau/comments/1bfvbj9/tableau_server_saml_help/ [9] Wtih Tableau Cloud SAML SSO, the Error "Your account or ... https://help.salesforce.com/s/articleView?id=001497311&language=en_US&type=1 [10] Troubleshooting Guide: Unable to Login to Tableau Cloud https://community.tableau.com/s/news/a0A4T000002dxIiUAI/troubleshooting-guide-unable-to-login-to-tableau-online [11] Intermittent Error "Unable to Sign In" with SAML SSO on Tableau ... https://help.salesforce.com/s/articleView?id=001473353&language=en_US&type=1 [12] SAML Authentication Failed, there was a ... - Tableau Community https://community.tableau.com/s/question/0D58b0000AEfEnICQV/some-users-unable-to-access-tableau-server-after-upgrading-from-202211-to-202217-saml-authentication-failed-there-was-a-problem-authenticating-the-user-errorcodenull [13] Tableau Server SAML setup - error :"Unable to Sign In - Invalid ... https://commtableau.my.site.com/s/question/0D54T00000q6dPwSAI/tableau-server-saml-setup-error-unable-to-sign-in-invalid-username-or-password [14] On SAML login for Tableau Server Error "Unable to Sign In https://help.salesforce.com/s/articleView?id=001498562&language=en_US&type=1 [15] Tableau Server - Use KeyCloak SAML per site https://community.tableau.com/s/question/0D58b0000BaJpwOCQS/tableau-server-use-keycloak-saml-per-site [16] How to set up Tableau SAML Single Sign-On (SSO)? - YouTube https://www.youtube.com/watch?v=7_c9U2ZDatg [17] Error "Invalid username or password" Signing Into Tableau Server ... https://help.salesforce.com/s/articleView?id=001473590&language=en_US&type=1 [18] Problem in Tableau SSO SAML configuration - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/1192809/problem-in-tableau-sso-saml-configuration [19] Configure Tableau Cloud or TCM for OpenID Connect https://help.tableau.com/current/online/en-us/openid_auth_server_config.htm [20] Tableau Server SAML Service https://help.tableau.com/current/server/en-us/server_process_saml-service.htm