Tableau: SAML message intended destination endpoint did not match

Yes, the auth0 documentation is either out-of-date or for another use-case. My auth0 configuration for Tableau Online looks like this:

{
    "mappings": {
      "email": "username"
    },
    "createUpnClaim": false,
    "passthroughClaimsWithNoMapping": false,
    "mapUnknownClaimsAsIs": false,
    "mapIdentities": false,
    "signatureAlgorithm": "rsa-sha1",
    "digestAlgorithm": "sha1",
    "lifetimeInSeconds": 43200,
    "signResponse": false,
    "nameIdentifierFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
    "nameIdentifierProbes": [
      "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"
    ]
}

and the “Application Callback URL” looks like this:

https://sso.online.tableau.com/public/sp/SSO?alias=someuuid

Hope that helps,

-Mike