Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Grow your Fabric skills and prepare for the DP-600 certification exam by completing the latest Microsoft Fabric challenge.

Reply
MalloyTrish
Regular Visitor

Embed report on SharePoint on-premises page (Sign-in prompt)

Hello,

 

Is there a way (SSO?) around making people sign into PBI.com to view a report housed on an internal SharePoint 2016 page? I've seen some PBI + SSO articles but I don't know if they specifically address seamlessly accessing reports from SP on-prem. Our users have access to the PBI report but have to click sign-in each time they want to view/interact with a PBI report on SP.

 

PBI SignIn.PNG

1 ACCEPTED SOLUTION
v-jialongy-msft
Community Support
Community Support

Hi @MalloyTrish 

To integrate Power BI reports on an internal SharePoint 2016 page without requiring users to sign in each time, you can utilize Single Sign-On (SSO) via an on-premises data gateway with Active Directory (AD) SSO. This method allows Power BI reports and dashboards to update in real-time and can be configured for seamless connectivity.

 

For setting up SSO in your environment, you would typically configure Kerberos-based SSO for on-premises data sources. This involves a few steps:

 

  • Ensure that Service Principal Names (SPNs) are configured for your underlying data sources, such as SQL Server, SAP HANA, or others.

 

  • Set up the delegation settings in your Active Directory environment. This includes configuring your gateway service account to delegate to specified services only and selecting the appropriate SPNs for your data sources.

 

  • Implement AES Encryption on service accounts involved in the SSO process, enabling encryption like Kerberos AES 128-bit or 256-bit encryption.

 

  • Lastly, grant specific local policy rights on the gateway machine to the gateway service account, such as the rights to impersonate a client after authentication.

 

 

Note that setting up Kerberos-based SSO can be complex and may require coordination with your IT department, especially regarding domain administrator rights and configuring Active Directory settings.

 

For more detailed guidance on setting up SSO with Power BI and SharePoint, you can refer to Microsoft's documentation on

Overview of single sign-on for on-premises data gateways - Power BI | Microsoft Learn

Configure Kerberos-based SSO from Power BI service to on-premises data sources - Power BI | Microsof...

Active Directory (AD) SSO - Power BI | Microsoft Learn

 

 

Best Regards,

Jayleny

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

2 REPLIES 2
MalloyTrish
Regular Visitor

Thank you @v-jialongy-msft! This is helpful, for sure!

v-jialongy-msft
Community Support
Community Support

Hi @MalloyTrish 

To integrate Power BI reports on an internal SharePoint 2016 page without requiring users to sign in each time, you can utilize Single Sign-On (SSO) via an on-premises data gateway with Active Directory (AD) SSO. This method allows Power BI reports and dashboards to update in real-time and can be configured for seamless connectivity.

 

For setting up SSO in your environment, you would typically configure Kerberos-based SSO for on-premises data sources. This involves a few steps:

 

  • Ensure that Service Principal Names (SPNs) are configured for your underlying data sources, such as SQL Server, SAP HANA, or others.

 

  • Set up the delegation settings in your Active Directory environment. This includes configuring your gateway service account to delegate to specified services only and selecting the appropriate SPNs for your data sources.

 

  • Implement AES Encryption on service accounts involved in the SSO process, enabling encryption like Kerberos AES 128-bit or 256-bit encryption.

 

  • Lastly, grant specific local policy rights on the gateway machine to the gateway service account, such as the rights to impersonate a client after authentication.

 

 

Note that setting up Kerberos-based SSO can be complex and may require coordination with your IT department, especially regarding domain administrator rights and configuring Active Directory settings.

 

For more detailed guidance on setting up SSO with Power BI and SharePoint, you can refer to Microsoft's documentation on

Overview of single sign-on for on-premises data gateways - Power BI | Microsoft Learn

Configure Kerberos-based SSO from Power BI service to on-premises data sources - Power BI | Microsof...

Active Directory (AD) SSO - Power BI | Microsoft Learn

 

 

Best Regards,

Jayleny

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
RTI Forums Carousel3

New forum boards available in Real-Time Intelligence.

Ask questions in Eventhouse and KQL, Eventstream, and Reflex.

MayPowerBICarousel

Power BI Monthly Update - May 2024

Check out the May 2024 Power BI update to learn about new features.

Top Solution Authors