Dynamic Access Token From Power BI - multi-factor authentication MFA

[ptkhoa2110]

Dear All,

Please give me how to get access token from Power BI Desktop. I have a code for get accesstoken

let
body = "grant_type=password&resource=https://analysis.windows.net/powerbi/api&client_id=*******&username=*******&password=*****",
Data = Json.Document(Web.Contents("https://login.microsoftonline.com/c4d8a220-a9ec-4572-8c77-ab36a3ecdbae/oauth2/token",[Headers=[#"Content-Type"="application/x-www-form-urlencoded"],Content=Text.ToBinary(body)])),
access_token = Data[access_token]
in
access_token

I already create Power BI app registration from Power BI Services and I sure fill correct client_id, username, password. But when I get the PowerBI Desktop show code (400): Bad Request. Tell me "

Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access ". How can I do this?

Many thank.

,  

[amitchandak]

@ptkhoa2110 , Not full sure, But may be related to Azure AD configuration

refer

https://community.powerbi.com/t5/Developer/Error-AADSTS50076-while-trying-to-login-on-App-owns-data-...

https://stackoverflow.com/questions/63938132/embed-powerbi-with-authentication-error-aadsts50076

https://github.com/microsoft/Partner-Center-PowerShell/issues/259

[ptkhoa2110]

Dear @amitchandak ,

The first thank for your support. 

But I use the Power BI Desktop. I refer here https://www.youtube.com/watch?v=N8qYRSqRz84&t=432s 

I don't able permision for conntact with admin azure to disable MFA for my account. The Power BI Desktop cannot support MFA for get token, right?

Thanks

[v-yingjl · Accepted solution]

Hi @ptkhoa2110 ,

It is related to your Azure AD settings, not power bi.

The request requires the user to do multi-factor authentication and then send this new token back to Web API 1 and complete the on-behalf-of flow. MFA was enabled by triggering a rule if some action (e.g. sudden location change) was treated as "risky activity". For an account there is a "moved to a new location" flag that can get set, automatically triggering the need for MFA, even if it was initially off.

Please check the conditional access locations in Azure AD and check if your AAD admin can clear the flag. Disable MFA for the account or configure conditional access to give access to "Global Admin" role.

Here are the suggestions in Azure portal:

1.Login as a tenant admin to https://portal.azure.com
2.Open the registration for your app in the
3.Go to Settings then Required Permissions
4.Press the Grant Permissions button

Note: If you are not a tenant admin, you cannot give admin consent

Please refer:

1. Error AADSTS50076: Due to a configuration change made by your administrator, or because you moved to... 
2. Multi-factor Authentication for Power BI – O365 

Best Regards,
Community Support Team _ Yingjie Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.