Hi, we have a problem with Power Bi Desktop:
The cube and our users reside on a different, non-trusted domains (the cube on domain A and the users on B). changing them to be trusted domains is not a possible or acceptable solution.
An additional limitation is that while we intend to create for these users corresponding user profiles on domain A, these outside user cannot receive the passwords to these user profiles.
The solution we’ve considered was allowing the outside users to access a cube through an http url, and create the impersonation for them on server A once their request is processed. (i.e. switch the user name they arrive with to a user name that the cube’s server knows and can work with)
However, we can’t seem to find how to extract the user name from http request sent from Power Bi desktop to the cube.
The only place we’ve found where username / password can be defined were the ones that arrive on the datasource connection, as connection string parameters.
The problem with this option is that when a report is shared, the connection & credentials to the datasource are also shared with the report, invalidating our security.
We’ve considered using windows credentials to circumvent the problem, but this means that users can save, share & restore their domain A credentials, invalidating our security.
We’re willing to consider using basic authentication, but have not found a way to implement it with Power BI Desktop. (at least not one that didn’t involve piggy-backing them on the connection string)
Could you please advise us how to implement a solution that will allow these outside users access to our cube through Power BI Desktop?
Thanks in advance.
