Forum Discussion
Securing external API authentication
- Anonymous4 years ago
Hi Anonymous ,
According to the API definition, we need credentials (user, password) to authenticate, which is unavoidable.
For security you can:
1.Disable downloading pbix files in the Admin Portal.
2.Parameterize the connection string of the data source with a blank value.Please refer to how to parameterize:
How to Parameterize Data Sources in Power BI | phData
Power BI Parameters – How to Use Parameters in the Power BI Service (designmind.com)
Best Regards,
Neeko Tang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
OK, I am feeling a bit clueless here.
Considering my use case and the API documentation stating the following;
All requests to the API must have the following headers:
User: user-uuid Key: key Secret: Secret
The method I outlined above is realistically the only method available to me? I am talking about this specific API only, not about other API's that might require OAuth or Basic auth.
Also, what is the correct method of dealing with this type of auth in the service? Is is simply a case of setting it to Anonymous Auth and ticking "Skip Test Connection"?
Thanks