We are currently using Tableau Server 10.1 and are looking to configure certain sites to use SAML while continuing to use local authentication for others. We have followed the steps to the point where we need to login via web to change authentication on sites. At this point, the sign in fails. It appears that the credentials are accepted but sign in is denied. We are able to login with the same credentials from the command line as well as if we switch back to No SAML Authentication mode. Any help would be appreciated.
This question likely has to go to support as it may require logs and some in-depth troubleshooting, but do you know if the log in is getting past your IDP then failing at Tableau Server or if the rejection coming from the IDP itself?