SAML SSO issue with SAP HANA

[Anonymous]

Hi,

We just implemented Power BI and trying to setup SSO with SAP HANA using an on premise gateway. I followed the following steps to set up the SSO. https://docs.microsoft.com/en-us/power-bi/service-gateway-sso-saml. 

However after setup, I keep on getting this error:

Underlying error message: The credentials provided cannot be used for the SapHana source.

Microsoft Data Mashup CredentialError Reason: Credential Invalid

To test it out, I tried using the following variations of my AD credentials:

domain\username

username

firstname.lastname@email.com

Firstname.Lastname@email.com 

All those variations, give me the same error. Also gateway logs, didn't change and consistently have this error:

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.7723201Z DM.EnterpriseGateway             64f98bde-5bae-4f99-a7d3-119b61b25a92  99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEA   99fdd2e7-6c6c-495c-5d97-99e22d710202        0D3AC833 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCompletedWithFailureEvent (duration=44, err=MashupCredentialException, rootcauseErrorEventId=0)

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        61D69515 [DM.Pipeline.Diagnostics] Exception object created [IsBenign=True]: Microsoft.PowerBI.DataMovement.Pipeline.Diagnostics.MashupDataAccessCredentialException: Missing or invalid credentials for data source. Reason = 'CredentialInvalid', DataSource = '<pi>SapHana/<server>:31015</pi>', DataSourceReference = '', DataSourceOrigin = '', DataSourceReferenceOrigin = ''.; ErrorShortName: MashupDataAccessCredentialException[ErrorCode=-2147467259,HResult=-2147467259]/Wrapped(MashupCredentialException)[ErrorCode=-2147467259,HResult=-2147467259]

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        8AA61592 [DM.Pipeline.Diagnostics] Exception data: DM_ErrorDetailNameCode_UnderlyingErrorCode = <pi>-2147467259</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        30C29923 [DM.Pipeline.Diagnostics] Exception data: DM_ErrorDetailNameCode_UnderlyingErrorMessage = <pi><pi>The credentials provided cannot be used for the SapHana source. (Source at glb-hana-102.ghdnet.internal:31015.)</pi></pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        6A5E25DC [DM.Pipeline.Diagnostics] Exception data: DM_ErrorDetailNameCode_UnderlyingHResult = <pi>-2147467259</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        0DAD7F02 [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.CredentialError.DataSourceKind = <pi>SapHana</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        6FAD98BE [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.CredentialError.DataSourcePath = <pi><server>:31015</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        E682FA4D [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.CredentialError.Reason = <pi>CredentialInvalid</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        85BEB06B [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.MashupSecurityException.DataSources = <pi>[{"kind":"SapHana","path":"<server>:31015"}]</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        E70370CD [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.MashupSecurityException.Reason = <pi>CredentialInvalid</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        85602DB6 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCompletedWithFailureEvent (duration=2799, err=MashupDataAccessCredentialException, rootcauseErrorEventId=0)

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8192022Z DM.EnterpriseGateway             09103dab-6d78-479c-a442-22a4665b6723  99fdd2e7-6c6c-495c-5d97-99e22d710202              MGPP   99fdd2e7-6c6c-495c-5d97-99e22d710202        7A770B63 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCompletedWithFailureEvent (duration=2817, err=MashupDataAccessCredentialException, rootcauseErrorEventId=0)

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8348301Z DM.EnterpriseGateway             d7f4dcd5-adf0-4fc2-95ea-a82102d7b9ce   99fdd2e7-6c6c-495c-5d97-99e22d710202              MDSR    99fdd2e7-6c6c-495c-5d97-99e22d710202        D08EEEC4 [DM.GatewayCore] Error processing request: [0]Microsoft.PowerBI.DataMovement.Pipeline.Diagnostics.MashupDataAccessCredentialException: Missing or invalid credentials for data source. Reason = '<pi>CredentialInvalid</pi>', DataSource = '<pi><pi>SapHana/<server>:31015</pi></pi>', DataSourceReference = '', DataSourceOrigin = '', DataSourceReferenceOrigin = ''.

GatewayPipelineErrorCode=DM_GWPipeline_Gateway_InvalidConnectionCredentials

GatewayVersion=

Reason=<pi>CredentialInvalid</pi>

DataSource=<pi><pi>SapHana/<server>:31015</pi></pi>

Does anyone have an idea on how I can do more detailed trace on the Power BI side so I can see what credential is being passed and what is causing issues? I'm from a SAP background and I turned on trace for both SAP HANA client and SAP HANA DB but can't find anything there so I suspect the error is from Power BI but no idea where and how to check. 

Any help will be very much appreciated.

Thanks a lot.

Robert

[v-qiuyu-msft]

Hi @Anonymous ,

I would suggest you create a support ticket to get dedicated support. 

Best Regards,
Qiuyun YTu