Session getting expired using Oauth

[orathee]

My app is connected to Tableau MCP using Oauth with Tableau cloud site.

When I open a new tab in same window and open a another tableau site then my app suddenly stop working and show couldn't connect to server. Looks like oauth token is replaced by new site login.

What is the solution/workaround of this ? Any help is appreciated

[orathee]

@anyoung-tableau Any thoughts here. Same behavior when i am using direct-trust with pass through enabled

[orathee]

I completely disabled oauth. Now I am passing dummy pat token name and value but pass through is enabled. Initial authorization is done using internal oauth using OIDC. My app is managing lifecycle of tokens using connected apps jwt. But still when i open a new site it again invalidated the session. Is it expected

[anyoung-tableau]

It's hard to tell what's happening. Can you please provide detailed repro steps so we can try to minimally repro this internally? Please describe exactly how Tableau MCP is configured, describe in detail the method for how you are generating the X-Tableau-Auth header provided to Tableau MCP at each step, and the details of the request that is failing.

[orathee]

Here are steps you can follow to reproduce:

Env File:

# Tableau MCP Server Config
SERVER='https://us-east-1.online.tableau.com'
SITE_NAME='MySite'
TRANSPORT='http'
PORT=3927
AUTH='pat'
PAT_NAME='Put Dummy PAT Name'
PAT_VALUE='Put Dummy Pat Value'
ENABLE_PASSTHROUGH_AUTH=true
INCLUDE_PROJECT_IDS='796ff8e0-4f58-e474a0ba52b2'
INCLUDE_DATASOURCE_IDS=955fce74-1d70-9dc9-7dc88c84c1b7,
INCLUDE_TOOLS=list-datasources,query-datasource,get-datasource-metadata
DANGEROUSLY_DISABLE_OAUTH='true'

# Tableau MCP Server Optional Configs
DATASOURCE_CREDENTIALS=''
DEFAULT_LOG_LEVEL='debug'
INCLUDE_TOOLS=''
EXCLUDE_TOOLS=''
MAX_RESULT_LIMITS=list-datasources:100

DISABLE_QUERY_DATASOURCE_VALIDATION_REQUESTS=true

PRODUCT_TELEMETRY_ENABLED=false

FILE_LOGGER_DIRECTORY='C:/Temp/mcp_logs'

ENABLED_LOGGERS=fileLogger

ENABLE_SERVER_LOGGING='true'
SERVER_LOG_DIRECTORY='C:/Temp/mcp_logs'

1. Open a private window
2. Open the app and authenticate using internal company oauth like Duo SSO and OIDC (or even with tableau oauth). Get the logged in username
3. Pass the username to get token using connected apps and jwt
4. Send the token to MCP server with X-Tableau-Auth header
5. Start few conversations
6. Open a new tab in same window and open another tableau cloud site other than connected to mcp server. I used cloud site in Different region and also tried with onprem site. Both use Internal Duo SSO with OIDC to sign in
7. Return to chat window and continue the chat
8. Chat failed. Frontend send the error and it even unable to connect my app and nothing is printing in app terminal
9. Sign out from app and Sign again with same as Step 2
10. Start the chat and it works fine
11. Open the dashboard in Site B in side tab and it also work fine
12. Return to chat and continue conversation and it also work fine now
13. Open another site in third tab and return to chat after authenication
14. Chat failed again
15. Sign out and Sign in again and chat work fine
16. Open the dashboard in third tab and it also work fine

I used Dummy Pat name and value and mcp server doesn't start with that. Same behaviour when using direct-trust with real credentials or using tableau oauth

[anyoung-tableau]

Thanks, but these are repro steps assuming we have access to your app, which we don't. We need repro steps that have been distilled down to their basic, technical elements, with exact details of the HTTP requests being made to Tableau MCP, and the responses from the requests Tableau MCP makes to the Tableau REST APIs.

[orathee]

Thanks. It looks like an expected behavior with internal oauth also. Facing same with other apps