SAML SSO for HANA DB

[wilsoja1]

Greetings friends, needing a Microsoft Engineer/employee or general expert to confirm my initial findings:

1. For PBI Server, I was told by Microsoft several weeks back that AD/Kerberos SSO is my only option when using a HANA DB.  Does everybody agree ?  (My organization really would prefer to use SAML SSO against HANA, but that SAML functionality only exists in the Gateway, to be used with PBI Service)
2. If question #1 is true,  then is SAML SSO (against a HANA DB) scheduled to be implemented on the PBI Server development horizon any time soon ? 
3. If PBI Server SAML SSO (against a HANA DB) will not be implemented any time soon (or ever) and we use AD/Kerberos, do you know if "keytabs" are used by PBI Server ?  

Thanks for any and all input !

[samuelmanseau]

Hello,

1/ Direct Query Mode : SSO with SAML & Azure Active Directory works well together.

2/ SAML needs both actions on Sap Hana & Gateway Server. 

3/no idea on Kerberos.

SSO with SAML it's perfect on DirectQuery mode to get your data corresponding your authorisation level on the data source (SAP) without having to create them back in PBI (RLS).

Hope it's helps,

Rgds,