Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
Anonymous
Not applicable

Two factor authentication

Hi there,

 

To increase security is there any way to use two factor authentication to the BI Service?

 

Many thanks in advance.

 

P

1 ACCEPTED SOLUTION
GuyInACube
Employee
Employee

Authentication is done via Azure Active Directory. You have several options for multi-factor authentication.

 

Using ADFS:

https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-get-started-adf...

 

Multi-factor authentication Azure service:

https://azure.microsoft.com/en-us/services/multi-factor-authentication/

 

You can also get to this within the Office 365 Admin portal by going to Users > Active Users > More > Setup Azure multi-factor auth in the new O365 Admin portal.

 

https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-8f0...

 

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube

View solution in original post

8 REPLIES 8
GuyInACube
Employee
Employee

Authentication is done via Azure Active Directory. You have several options for multi-factor authentication.

 

Using ADFS:

https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-get-started-adf...

 

Multi-factor authentication Azure service:

https://azure.microsoft.com/en-us/services/multi-factor-authentication/

 

You can also get to this within the Office 365 Admin portal by going to Users > Active Users > More > Setup Azure multi-factor auth in the new O365 Admin portal.

 

https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-8f0...

 

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube

There´s a problem when I´m trying to publish one pbix file into our tenant, and I´m 100% sure that is because of MFA. As we are Microsoft Partner, we need MFA now in all our users BUT my app is not working anymore and I´m really desperate in what to do.

 

        protected static void AdquireTokenAcesso(string usuario, string senha, string ClientID)
        {

            // create new ADAL authentication context 
            var authenticationContext = new AuthenticationContext(ProgramConstants.AzureAuthorizationEndpoint);

            System.Net.ServicePointManager.SecurityProtocol = System.Net.ServicePointManager.SecurityProtocol | System.Net.SecurityProtocolType.Tls12;


            var userCreds = new UserPasswordCredential(usuario, senha);

            var userAuthnResult = authenticationContext.AcquireTokenAsync(ProgramConstants.PowerBiServiceResourceUri,
                                                                          ClientID, userCreds).Result;
            Console.WriteLine("Adquirindo Token de Acesso...");

            AccessToken = userAuthnResult.AccessToken;

            Console.WriteLine("Usuário: " + userAuthnResult.UserInfo.DisplayableId);
        }

namespace Microsoft.IdentityModel.Clients.ActiveDirectory
{
    // Summary:
    //     Extension class to support username/password flow.
    public static class AuthenticationContextIntegratedAuthExtensions
    {
        // Summary:
        //     Acquires security token from the authority.
        //
        // Parameters:
        //   ctx:
        //     Authentication context instance
        //
        //   resource:
        //     Identifier of the target resource that is the recipient of the requested
        //     token.
        //
        //   clientId:
        //     Identifier of the client requesting the token.
        //
        //   userCredential:
        //     The user credential to use for token acquisition.
        //
        // Returns:
        //     It contains Access Token, its expiration time, user information.
        //
        // Remarks:
        //     This feature is supported only for Azure Active Directory and Active Directory
        //     Federation Services (ADFS) on Windows 10.
        public static Task<AuthenticationResult> AcquireTokenAsync(this AuthenticationContext ctx, string resource, string clientId, UserCredential userCredential);
    }
}​



Message: {"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000009-0000-0000-c000-000000000000'.\r\nTrace ID: 3793b357-9420-4f9e-9a19-44073b8a1200\r\nCorrelation ID: 3edc0be6-8c6a-41f0-a37a-010e05ae2a01\r\nTimestamp: 2019-10-31 13:16:16Z"}

Any help @GuyInACube?

 

@brunozanoelo Were you able to solve this issue? I am also getting similar error after multi factor authentication is enabled.

Any idea how to disable multi-factor authentication by default?

Hello @piper!

Yeah, I solved this situation disabling the default securitu parameter in azure:

I seens Microsoft enables it without permission or consent time to time (this is ridiculous, it´s my enviroment), must pay attention on it.

https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview

brunozanoelo_0-1705671292616.png


Plus, disable the MFA in the user and should be fine!

Best regards!

Tengo el mismo problema, cual fue tu solucion?

It looks like in Powerbi.com (or office365) provide the two factor authenticiation features. But how about on-prem Power BI report server? Anybody has idea about how to implement two factor authentication?

ankitpatira
Community Champion
Community Champion

@Anonymous I don't think it is possible currently. You can submit it as idea but a lot of people would also argue against it.
Anonymous
Not applicable

Thanks for the reply.

 

How about through an Office 365 subscription, could that work?

 

Thanks again.

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors