feat: add --idp-configuration-id flag for multi-IDP Tableau Cloud sites

[jacalata]

Closes #393.

Motivation

Tableau Cloud 2024.3+ supports up to 20 identity providers per site.
The REST API takes an idpConfigurationId attribute when creating
users, but neither createsiteusers nor createUsers exposed it, so
operators on multi-IDP sites had to bypass tabcmd and script the REST
API directly.

Behavior change

For users:

• --idp-configuration-id UUID added to both createsiteusers and
  createUsers. Applies to every user in the batch.
• argparse.add_mutually_exclusive_group enforces that --auth-type
  and --idp-configuration-id can't both be passed, matching the REST
  API's own constraint (TSC's create_req raises if both are set on a
  UserItem).
• Passing --idp-configuration-id clears any pre-existing
  auth_setting on the UserItem (mostly to handle the case where the
  CSV column 8 supplied an auth type and the CLI flag overrides it).

Scope not covered:

• CSV format is unchanged. Adding a 9th column here alone would create
  format divergence with tabcmd 1 and the Server web-UI user import;
  per-user IDP assignment would need a coordinated cross-tool change.
• Per-user IDP assignment via CSV is not implemented; batch-level only.

Refactor bundled: the per-user --role/--auth-type/
--idp-configuration-id application was duplicated between the two
commands. Lifted into UserCommand.apply_cli_overrides.

Test plan

• pytest tests/ — 347 passed, 2 skipped
• 6 new tests: parser + mutual-exclusion on each of createsiteusers
  and createUsers (4 tests); apply_cli_overrides IDP-clears-auth and
  role-application (2 tests)
• check-strings passes; black --check clean; mypy clean
• tabcmd createsiteusers --auth-type SAML --idp-configuration-id x users.csv — argparse rejects with "not allowed with argument
  --auth-type"

Follow-ups

Per-user IDP assignment via a 9th CSV column would need to land
coordinated with tabcmd 1 and the Server web-UI import.

🤖 Generated with Claude Code

[github-actions]

Coverage Report

File	Stmts	Miss	Cover	Missing
tabcmd
__main__.py	12	12	12	0%
_version.py	11	11	11	0%
tabcmd.py	15	15	15	0%
version.py	9	5	5	44%
tabcmd/commands
commands.py	10	10	10	0%
constants.py	77	24	24	69%
server.py	135	18	18	87%
tabcmd/commands/auth
session.py	394	50	50	87%
tabcmd/commands/datasources_and_workbooks
datasources_and_workbooks_command.py	157	18	18	89%
datasources_workbooks_views_url_parser.py	142	5	5	96%
delete_command.py	60	16	16	73%
export_command.py	120	25	25	79%
get_url_command.py	127	47	47	63%
publish_command.py	123	28	28	77%
runschedule_command.py	21	7	7	67%
tabcmd/commands/extracts
create_extracts_command.py	42	8	8	81%
decrypt_extracts_command.py	27	2	2	93%
delete_extracts_command.py	37	6	6	84%
encrypt_extracts_command.py	27	2	2	93%
extracts.py	20	2	2	90%
reencrypt_extracts_command.py	27	2	2	93%
refresh_extracts_command.py	48	10	10	79%
tabcmd/commands/group
create_group_command.py	29	5	5	83%
delete_group_command.py	27	2	2	93%
tabcmd/commands/project
create_project_command.py	46	8	8	83%
delete_project_command.py	35	4	4	89%
publish_samples_command.py	30	4	4	87%
tabcmd/commands/site
create_site_command.py	34	5	5	85%
delete_site_command.py	27	2	2	93%
edit_site_command.py	38	2	2	95%
list_command.py	77	12	12	84%
list_sites_command.py	29	2	2	93%
tabcmd/commands/user
add_users_command.py	29	5	5	83%
create_site_users.py	55	11	11	80%
create_users_command.py	55	10	10	82%
delete_site_users_command.py	43	5	5	88%
user_data.py	240	31	31	87%
tabcmd/execution
_version.py	2	2	2	0%
global_options.py	125	8	8	94%
localize.py	66	11	11	83%
logger_config.py	60	6	6	90%
tabcmd_controller.py	42	7	7	83%
TOTAL	2884	465	84%

[Copilot]

Pull request overview

Adds support for multi-IDP Tableau Cloud sites by exposing the REST API’s idpConfigurationId field via a new CLI flag, and centralizes per-user CLI override logic to avoid duplication across user-import commands.

Changes:

• Adds --idp-configuration-id to both createsiteusers and createUsers, enforced as mutually exclusive with --auth-type.
• Refactors role/auth/idp application into UserCommand.apply_cli_overrides and updates both commands to use it.
• Extends parser and command-level unit tests, plus adds an i18n help string for the new flag.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
tests/parsers/test_parser_create_user.py	Adds parser coverage for --idp-configuration-id and mutual exclusion.
tests/parsers/test_parser_create_site_users.py	Adds parser coverage for --idp-configuration-id and mutual exclusion.
tests/commands/test_user_utils.py	Adds unit tests for UserCommand.apply_cli_overrides behavior (role/auth/idp precedence).
tests/commands/test_run_commands.py	Updates mocked args to include the new idp_configuration_id attribute.
tabcmd/locales/en/tabcmd_messages_en.properties	Adds help text for --idp-configuration-id.
tabcmd/commands/user/user_data.py	Introduces set_auth_and_idp_args and apply_cli_overrides in shared user command base.
tabcmd/commands/user/create_users_command.py	Wires new args + shared override logic into createUsers.
tabcmd/commands/user/create_site_users.py	Wires new args + shared override logic into createsiteusers.

Suppressed comments (2)

tests/parsers/test_parser_create_user.py:49

• This mutual-exclusion test also uses a non-UUID placeholder value for --idp-configuration-id. Consider switching to a valid UUID so the test reflects expected real-world input.

                "--idp-configuration-id",
                "abc-123-idp",
            ]

tests/parsers/test_parser_create_site_users.py:69

• This mutual-exclusion test also uses a non-UUID placeholder value for --idp-configuration-id. Consider switching to a valid UUID so the test reflects expected real-world input.

                "SAML",
                "--idp-configuration-id",
                "abc-123-idp",
            ]

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

🟡 Changes recommended

New localization keys were added without updating the compiled gettext .mo catalogs, which can cause raw message IDs to appear in user-facing CLI help/error output.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

• Files reviewed: 8/8 changed files
• Comments generated: 1
• Review effort level: Lite