In the context of Tableau Cloud, what is a key benefit of implementing automated user provisioning using SCIM?
A. Eliminating the need for any user authentication mechanisms in Tableau Cloud
B. Reducing the administrative overhead associated with manual user account management and improving security
C. Allowing users to bypass organizational identity verification processes for quicker access to Tableau Cloud
D. Integrating SCIM solely for tracking user activity and not for managing user accounts
B. Reducing the administrative overhead associated with manual user account management and improving security
Explanation:
Why B is Correct?
SCIM (System for Cross-domain Identity Management) automates user provisioning and deprovisioning in Tableau Cloud by syncing with your organization’s identity provider (e.g., Okta, Azure AD).
Key benefits:
Reduces manual work: Automatically creates, updates, or disables users based on HR/IT systems.
Improves security: Ensures timely removal of access for departed employees (no orphaned accounts).
Enforces consistency: Roles/groups in your IdP map directly to Tableau Cloud permissions.
Tableau’s SCIM Documentation highlights these advantages.
Why Other Options Are Incorrect?
A. Eliminating authentication: SCIM doesn’t remove authentication—it works alongside SSO/MFA.
C. Bypassing identity verification: SCIM relies on your IdP’s verification processes; it doesn’t circumvent them.
D. Tracking-only use: SCIM’s primary purpose is user lifecycle management, not activity tracking.
How SCIM Works in Tableau Cloud:
IdP sync: User changes (hires/role changes/terminations) in your identity provider (e.g., Azure AD) trigger updates in Tableau Cloud.
Attribute mapping: User groups/roles in the IdP assign corresponding Tableau site roles (e.g., "Viewer," "Creator").