on-premises gateway authentication failed

[billzhang1123]

We have on-premises gateway installed on an Azure VM. Somehow we can't SSO in the gateway with the following error. However PBI SSO on the same VM worked fine.

Failed to sign in. Please verify your credentials and try again.

The browser based authentication dialog failed to complete. Reason: The requested resource requires user authentication.

   at Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext.RunAsyncTask[T](Task`1 task)

   at Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.AuthenticationManager.AuthenticateWithSelectedUser(String authorityAddress, String resource, String clientId, String redirectAddress)

The email registration took me to the usual ABB domain login as expected:

[billzhang1123 · Accepted solution]

It turned out be the security level is set to high in IE which somehow blocked the SSO authentication.

[chefe]

Hi there,

I am having the same issue. But the internet zone security settings of IE are already set to "Internet" which to afaik is not HIGH security.

DCan you please elaborate what specific settings you have changed? Or did a generell change of the overall security zone do the trick?

Cheers

[celsusilva]

go to I.E. --> Security --> Custom Level --> User Authentication --> select Prompt for user name and password

it worked for me

[Greg_Deckler]

Is this the Personal or Enterprise gateway? I read through the following articles and can't find a reference to using federation, which I am assuming is how your are doing your SSO (are you using Ping or ADFS?)

https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem-tshoot/

https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem-indepth/

https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem/

https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-onprem-faq/

So, my conclusion is that either it shouldn't be an issue in terms of the gateway or that it is not supported which really doesn't help much.