SAML / OPENID connect keycloak as IDP and powerBI as SP

[Anonymous]

I am trying to authenticate my powerBI on cloud using an external Identity provider, this means that when I hit my powerbi endpoint I want the authentication to be using keycloak not azure AD.

I need that keycloak is the IDP and powerBI is the SP

I realized that azure AD is the only product for powerbi authentication so even if Keycloak is an IDP for azure AD would be ok for me, my core point is that the powerbi endpoint on authentication redirects the user to keycloak, I need this because I am using keycloak for a SSO solution which would only work if the user authentication starts there.

I have found ways of using azure AD as IDP but I don't need that

I have found ways of federating so that azure AD IDP can authenticate users in the keycloak directory, but I also don't need that

[v-luwang-msft]

Hi @Anonymous ,

Has your problem been solved, if so, please consider Accept a correct reply as the solution or share your own solution to help others find it.

Best Regards
Lucien

[v-luwang-msft]

Hi 

Refer if the following article is helpful to you:

https://docs.microsoft.com/en-us/power-bi/admin/service-admin-power-bi-security 

https://www.miniorange.com/power-bi-single-sign-on-(sso) 

Best Regards

Lucien