View the following video for the SSO setup in Azure
The claims define what data is sent to WriteBackExtreme upon login. In the video i use e-mail address as the value for username since that is commonly used. This value should match the field that is used as username in your tableau server.
When there is any error while setup we advise to use the Chrome browser plugin SAML tracer to see what data is sent to WriteBackExtreme. Also https://samltool.io/ is a good tool to check the SAML payload.
