cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
jamesh
Microsoft
Microsoft

Will constrained delegation using Kerberos be supported?

Regardless of the complexity of SSO we still have customers that want to "secure" everything they do with constrained delegation and in some instances see it as a show stopper.  Is there any plan to bring this into the product?

 

Thanks, James

1 REPLY 1
regbac
Regular Visitor

Waow, this is a very interesting question.

 

I suppose that they want to use KCD in regard to their on-premises data sources otherwise I don't see it makes sense.

And the only on-premises data source that there truely is right now is SSAS Tabular, which supports and uses the EffectiveUserName property.

 

The EffectiveUserName property is a real Kerberos "killer" as it push the username down to the data source eliminating the need for delegating credentials. This way you get row level security without the need for setting up KCD.

 

If it becomes supported you will still need to setup Azure AD and Azure AD Application Proxy and then use an Azure AD Application proxy connector on you on-prem side. If these are 2 different domains you will have even more challenges before it works.

 

So for now, I will stay with the EffectiveUserName property if it's a viable solution for you.

 

Cheers

 

Régis

Helpful resources

Announcements
Microsoft Build 768x460.png

Microsoft Build is May 24-26. Have you registered yet?

Come together to explore latest innovations in code and application development—and gain insights from experts from around the world.

May 23 2022 epsiode 5 without aka link.jpg

The Power BI Community Show

Welcome to the Power BI Community Show! Jeroen ter Heerdt talks about the importance of Data Modeling.

Power BI Dev Camp Session 22 with aka link 768x460.jpg

Check it out!

Mark your calendars and join us on Thursday, May 26 at 11a PDT for a great session with Ted Pattison!

charticulator_carousel_with_text (1).png

Charticulator Design Challenge

Put your data visualization and design skills to the test! This exciting challenge is happening now through May 31st!