Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.
Hello,
Our company is using Google accounts as a primary user directory. We've recently federated our @veolia.com Azure accounts to Google, so that :
- The identification provider (IDP) is Cloudmanager
- The service provider (SP) is Azure AD
The authentication uses SAMLv2.
Unfortunately, as soon as the operation has been effective, all our users lost their ability to connect with Power BI mobile app (mainly Android).
The error sent by some Google some Google components says :
-----------------------start of message
403. That’s an error.
Error: disallowed_useragent
Google can’t sign you in safely inside this app. You can use Google sign-in by visiting this app’s website in a browser like Safari or Chrome.
Learn more : https://developers.googleblog.com/2016/08/modernizing-oauth-interactions-in-native-apps.html
Request Details
access_type=online
approval_prompt=auto
client_id=519284684754-f3jrbmp6if45o1ivcaj05uif34g3g113.apps.googleusercontent.com
redirect_uri=https://directory-veolia.appspot.com/oauth2callback
response_type=code
scope=profile email
state=8bf76e3f5f5849dd9818f54ea4847978
That’s all we know.
--------------- end of message
Power bi desktop actually manages this, by opening a browser window (IE) for the time of the Google authentication.
FYI, we've also encountered this problem with salesforce mobile app, where a checkbox "use the native browser for user authentication on iOS" works pretrty well.
Our user can still connect from their smartphones with a standard browser, which is hard to manage.
Is there a workaround, to have our mobile users keep using PowerBI (and especially get push notifications on alerts).
Thank you !
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.