Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
paulhasell
New Member

Does anyone know how to get Power BI Desktop registered with ADFS through to CRM on-prem IFD?

There doesn't seem to be a nice guide on this and it doesn't appear to be obvious. MS have added the support for this connection model but not any information on how to set it up 😞

12 REPLIES 12
robertoz
Advocate I
Advocate I

Hi All,

 

How did you solved this?

 

I have just found following solution by MS. However I couldn't test it. I need to ask admin of CRM to have a look.

https://support.microsoft.com/en-us/kb/3133137

R.

 

It has been some time since the last message, however it took some time to figure out the correct setup.

 

The settings that need changing on the CRM server are below - the linked article robtertoz referred to relates to ClaimsSettings, however you simply need to enable the OAuthClaims method as per below.

 

$ClaimsSettings = Get-CrmSetting -SettingType OAuthClaimsSettings
$ClaimsSettings.Enabled = $true
Set-CrmSetting -Setting $ClaimsSettings

 

refer to the article:

https://technet.microsoft.com/en-us/library/hh699726.aspx

 

You still need to register the PowerBI app as shown in the other article in ADFS.

 

 

Add-AdfsClient -ClientId "a672d62c-fc7b-4e81-a576-e60dc46e951d" -Name "Microsoft Power BI" -RedirectUri @("https://de-users-preview.sqlazurelabs.com/account/reply/", "https://preview.powerbi.com/views/oauthredirect.html") -Description "ADFS OAuth 2.0 client for Microsoft Power BI"

 

 

 I tried to configure settings on on-premise CRM 2013 using the following routine:

 

On the CRM Server:

 

$fedurl = Get-CrmSetting -SettingType ClaimsSettings
$fedurl.FederationProviderType = 1
Set-CrmSetting $fedurl

 

FederationProviderType property remains 0.

 

On the ADFS Server:

 

Add-AdfsClient -ClientId "a672d62c-fc7b-4e81-a576-e60dc46e951d" -Name "Microsoft Power BI" -RedirectUri @("https://de-users-preview.sqlazurelabs.com/account/reply/", "https://preview.powerbi.com/views/oauthredirect.html") -Description "ADFS OAuth 2.0 client for Microsoft Power BI"

 

Although now i am able to pass the authentication step i receive a "The user was not authorized" message.

 

Any help?

@giampitz 

Solved!

There was a problem caused by the firewall and the reverse-proxy service.

I can confirm that PBI Desktop works correclty on top of MSCRM IFD + claims adfs authentication with this configuration.

 

Regards,

@giampitz

Hi giampits,

can you please elaborate your steps for firewall and reverse-proxy service?

do i need to install my PBI Desktop on my Server and do something afterwards?

as of now i have done this

- allowed PBI using command in power-shell

 

any help will be appreciated.

Hi giampitz,

i would like to know the steps which you did can you please elaborate your steps for firewall and reverse-proxy service?

do i need to install PBI Desktop on server?

Youssef
Employee
Employee

Thanks for reaching out. You can register your ADFS endpoint via the Options dialog (under the “Global -> Security” tab) and then use OData to connect to the CRM feed.

 

Let us know if that still doesn't work.

 

Youssef

Youssef Shoukry
Product Manager, Power BI

Hi Youssef, It's been a while since you posted this idea but I still have no viable solution and others are experiencing the same issues. Any further advice/suggestions would be useful.

 

Regards

 

Paul Hasell

Hi Youssef,

 

That panel has no options to add an ADFS endpoint.

 

If I try and connect via Organizational Account I get:

 

Capture.PNG

 

If I try using WIA I get:

 

Capture2.PNG

 

In the Query Editor.

 

I used Fiddler to look at the traffic connecting to CRM Online vs IFD and they are completely different. Reading around there's some (unhelpful) documentation relating to registering the client with ADFS but nothing definitive enough for this client.

 

Any help would be very welcome

Hi Paul,

 

Did you find a solution? I'm having the same issue/question.

 

Regards,

Robrecht

I'm also interested in how to get this working.

Did anyone find a solution to this? I'm trying to connect Power BI to our on-premises installation of CRM using oData and keep getting the following error:

 

Unable to Connect

We encountered an error while trying to connect.

Details: "OData: The given URL neither points to an OData service or a feed: 'https://adfs.mydomain.com/adfs/ls/?wa=wsignin1.0&wtrealm=https://crm.mydomain.com/&wctx=rm=1&id=f3bd...

 

Any ideas on how to get round this?

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors