Configure SAML/SSO authentication for all users on an onPremise Power BI environment

[Anonymous]

Hello,

We are looking to configure our PBIRS on premise environments to use SSO/SAML for all users accessing reports.

Is there any proper documentation out there or if anyone has already accomplish same.

Thank you

Majid

[amitchandak]

@Anonymous , refer, if this can help https://docs.microsoft.com/en-us/power-bi/service-gateway-sso-kerberos#configure-sap-bw-for-sso-using-commoncryptolib

[Anonymous]

Hello @amitchandak   , appreciate the quick response. Thanks.

The link shared refers more to the SSO between Power BI and on premise data sources.

What I am really looking to implement is to have all PBIRS users authenticated thorough SSO/SAML before they can access reports hosted in PBIRS environments.

I can't find such documentation anywhere.

[RobThrive]

What exactly are you trying to achieve/prevent ?
For example anyone in our domain can go to the report server URL, but if they are not in the relevant group or individual access, they cannot view the folders or reports. This is managed via the report server itself under Security.

[Anonymous]

Hello @RobThrive ,

We do have a third party layer which we are using currenty to authenticate users to access Power BI environment reports.

This set of users that are going through this process have not been part of Active directry. However, they are part of it now.

In order to have them authenticated them from the stations they are working from and have them access Power BI directly, we need to have the PBIRS environment configured to use SSO/SAML as user authentication for security and company management purpose.

We are currently managing the rest of the Power BI users as you have mentioned, using AD groups to manager folders permissions.

Do you know if Power BI supports the SSO/SAML as a user authentication? We are also using a different BI tool (Tableau) which supports the SAML/SSO with no issues.