Skip to main content
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
Anonymous
Not applicable

Power BI SSO with SAP HANA using on premise gateway

‎02-12-2019 05:12 PM

Hi,

 

We just implemented Power BI and trying to setup SSO with SAP HANA using an on premise gateway. I followed the following steps to set up the SSO. https://docs.microsoft.com/en-us/power-bi/service-gateway-sso-saml. 

 

However after setup, I keep on getting this error:

 

Underlying error message: The credentials provided cannot be used for the SapHana source.

Microsoft Data Mashup CredentialError Reason: Credential Invalid

 

To test it out, I tried using the following variations of my AD credentials:

domain\username

username

firstname.lastname@email.com

Firstname.Lastname@email.com 

 

All those variations, give me the same error. Also gateway logs, didn't change and consistently have this error:

 

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.7723201Z DM.EnterpriseGateway             64f98bde-5bae-4f99-a7d3-119b61b25a92  99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEA   99fdd2e7-6c6c-495c-5d97-99e22d710202        0D3AC833 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCompletedWithFailureEvent (duration=44, err=MashupCredentialException, rootcauseErrorEventId=0)

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        61D69515 [DM.Pipeline.Diagnostics] Exception object created [IsBenign=True]: Microsoft.PowerBI.DataMovement.Pipeline.Diagnostics.MashupDataAccessCredentialException: Missing or invalid credentials for data source. Reason = 'CredentialInvalid', DataSource = '<pi>SapHana/<server>:31015</pi>', DataSourceReference = '', DataSourceOrigin = '', DataSourceReferenceOrigin = ''.; ErrorShortName: MashupDataAccessCredentialException[ErrorCode=-2147467259,HResult=-2147467259]/Wrapped(MashupCredentialException)[ErrorCode=-2147467259,HResult=-2147467259]

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        8AA61592 [DM.Pipeline.Diagnostics] Exception data: DM_ErrorDetailNameCode_UnderlyingErrorCode = <pi>-2147467259</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        30C29923 [DM.Pipeline.Diagnostics] Exception data: DM_ErrorDetailNameCode_UnderlyingErrorMessage = <pi><pi>The credentials provided cannot be used for the SapHana source. (Source at glb-hana-102.ghdnet.internal:31015.)</pi></pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        6A5E25DC [DM.Pipeline.Diagnostics] Exception data: DM_ErrorDetailNameCode_UnderlyingHResult = <pi>-2147467259</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        0DAD7F02 [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.CredentialError.DataSourceKind = <pi>SapHana</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        6FAD98BE [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.CredentialError.DataSourcePath = <pi><server>:31015</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        E682FA4D [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.CredentialError.Reason = <pi>CredentialInvalid</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        85BEB06B [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.MashupSecurityException.DataSources = <pi>[{"kind":"SapHana","path":"<server>:31015"}]</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        E70370CD [DM.Pipeline.Diagnostics] Exception data: Microsoft.Data.Mashup.MashupSecurityException.Reason = <pi>CredentialInvalid</pi>

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8035781Z DM.EnterpriseGateway             d3df4619-cfd0-4044-98c6-b23a97e637ac    99fdd2e7-6c6c-495c-5d97-99e22d710202              MGEQ   99fdd2e7-6c6c-495c-5d97-99e22d710202        85602DB6 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCompletedWithFailureEvent (duration=2799, err=MashupDataAccessCredentialException, rootcauseErrorEventId=0)

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8192022Z DM.EnterpriseGateway             09103dab-6d78-479c-a442-22a4665b6723  99fdd2e7-6c6c-495c-5d97-99e22d710202              MGPP   99fdd2e7-6c6c-495c-5d97-99e22d710202        7A770B63 [DM.Pipeline.Common.TracingTelemetryService] Event: FireActivityCompletedWithFailureEvent (duration=2817, err=MashupDataAccessCredentialException, rootcauseErrorEventId=0)

DM.EnterpriseGateway Error: 0 : 2019-02-12T22:31:48.8348301Z DM.EnterpriseGateway             d7f4dcd5-adf0-4fc2-95ea-a82102d7b9ce   99fdd2e7-6c6c-495c-5d97-99e22d710202              MDSR    99fdd2e7-6c6c-495c-5d97-99e22d710202        D08EEEC4 [DM.GatewayCore] Error processing request: [0]Microsoft.PowerBI.DataMovement.Pipeline.Diagnostics.MashupDataAccessCredentialException: Missing or invalid credentials for data source. Reason = '<pi>CredentialInvalid</pi>', DataSource = '<pi><pi>SapHana/<server>:31015</pi></pi>', DataSourceReference = '', DataSourceOrigin = '', DataSourceReferenceOrigin = ''.

 

GatewayPipelineErrorCode=DM_GWPipeline_Gateway_InvalidConnectionCredentials

GatewayVersion=

Reason=<pi>CredentialInvalid</pi>

DataSource=<pi><pi>SapHana/<server>:31015</pi></pi>

 

Does anyone have an idea on how I can do more detailed trace on the Power BI side so I can see what credential is being passed and what is causing issues? I'm from a SAP background and I turned on trace for both SAP HANA client and SAP HANA DB but can't find anything there so I suspect the error is from Power BI but no idea where and how to check. 

 

Any help will be very much appreciated.

 

Thanks a lot.

Robert

Labels:
Message 1 of 8
3,379 Views
0
7 REPLIES 7
Base
New Member

‎01-21-2021 12:20 PM

Hopefully this helps someone else out there. Finally resolved this issue by adding: 

<setting name=" FullDomainResolutionEnabled " serializeAs="String"> <value>True</value> </setting>

 

File: Microsoft.PowerBI.DataMovement.Pipeline.GatewayCore.dll.config

Which is listed here: https://docs.microsoft.com/en-us/power-bi/connect-data/service-gateway-sso-kerberos-sap-hana

 

Odd because it's not listed as a requirement, just notes it helps with performance but it worked.

Message 8 of 8
1,920 Views
0
Base
New Member

‎01-20-2021 09:02 PM

Any new progress on this one? I'm having the same issue with users added to an SAP HANA data source with SSO & Kerberos authentication. 

Error: "The credentials provided cannot be used for the SapHan source." 

 

Verified SPN, Delegation, and Gateway impersonation policies are in place.

Message 7 of 8
1,948 Views
0
v-yulgu-msft
Employee
Employee

‎02-13-2019 10:22 PM

Hi @Anonymous,

 

Please check whether the gateway can map the Azure Active Directory UPN to a local Active Directory identity successfully. https://docs.microsoft.com/en-us/power-bi/service-gateway-sso-overview#query-steps-when-running-sso

 

For further analysis, please create a support ticket.

 

Best regards,

Yuliana Gu

Community Support Team _ Yuliana Gu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Message 2 of 8
3,350 Views
0
Anonymous
Not applicable
In response to v-yulgu-msft

‎02-18-2019 03:14 PM
Hi Yuliana, I checked and the gateway can map the Asure AD UPN to our local AD successfully. Checking on the link you sent for opening a support ticket, it only prompts to create a new idea. Is there a support process for checking on these issues where we can raise a support ticket/incident? Thanks a lot, Robert
Message 3 of 8
3,337 Views
0
pcgeekus
Helper I
Helper I
In response to Anonymous

‎06-19-2019 03:04 PM

In the AD Users and Groups tool, add your Hana Servers to the Data Gateway Domain Account’s Delegation tab. This allows user impersonation by the Domain Account used to run your Enterprise Data Gateway to any listed delegation server. Once added, it should show as hdb service. We tried Vanity Names, but had to add the actual server FQNs (servername.domain.com). 

Message 6 of 8
3,100 Views
0
v-yulgu-msft
Employee
Employee
In response to Anonymous

‎02-20-2019 01:44 AM

Hi @Anonymous ,

 

You could refer to below .gif or pasted link.

Support Ticket.gif

 

Creating Power BI Support Cases

 

Best regards,

Yuliana Gu

Community Support Team _ Yuliana Gu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Message 4 of 8
3,326 Views
0
Anonymous
Not applicable
In response to v-yulgu-msft

‎02-27-2019 03:43 PM

I tried submitting a support request at least 10 times now and I always get this error:

 

error2.jpg

 

Is there any way to submit a support ticket other than this as I'm not sure why it always errors out when I click on SUBMIT

Message 5 of 8
3,283 Views
0

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.

View All
Top Solution Authors
View All
Top Kudoed Authors
View All