This is a shot in the dark, but are the users somehow defined as local within the Tableau server instead of connected to the domain with integrated AD security?
Is this an upgrade or new installation?
Have you opened a support case yet?
The users are all AD users. No local users defined in Server at all. Can see and import users/groups from AD fine once we are logged in, just that weird error when trying to perform an automatic login.
It is a completely new installation purpose built VM's. To be sure it wasn't an installation issue on my part, I redid a completely clean installation again and the same error surfaced.
I have indeed opened a support case for this one and I am awaiting feedback from support. They also initially thought it was a nickname issue but that turned out not to be the case.
Is Microsoft SSPI enabled for your servers? To be honest, I'm not really sure how to check whether it is or not, but this is the basic method for Tableau to pickup the credential and then authenticate against the repository.
Also, have a look at the event viewer on your TS to see if this gives you any clues.
You may be on to something with the SSPI there. It's a large financial institution so they keep everything locked down pretty tight.
It may be something like Internet Explorer is identifying the server as being in the internet domain rather than the intranet domain. I will check that with them tomorrow morning.
one more thought came to mind. Are the users logging in via windows workstations? I think SSPI only works from windows machines. This is probably why Tableau enabled Kerberos as an option as it is more generic and can be configured to work independent of workstation type.
They are windows machine, albeit pretty heavily locked down windows machines. I am waiting on them to clarify a few more technical points and maybe that will shed some light on the situation.
I have seen this error before. It's most likely that the domain nickname being sent in the authentication request does not match the nickname configured in Tableau Server.