Forum Discussion
Authenticate with client certificate
Finally I found a solution by myself "out of the box". Well, not really OOTB - I had to take many hurdles - but it works.
Namely with Web Application Proxy (WAP), a feature in Windows Server 2016 (SSRS/PBIRS needs 2016), and Active Directory Federation Services (ADFS). I used this documentation: If you publish "https://reports.contoso.com/" (and not only "https://reports.contoso.com/reports/") you have a full-featured PBIRS accessible from extranet and authentication possible via Forms auth, Client certificate and even MFA:
https://docs.microsoft.com/en-us/power-bi/consumer/mobile/mobile-oauth-ssrs
Hi Martin!
Did you get a solution for that?
I am also searching for Client Certificate Authentication (although against Active Directory).
Not really. The answer given by v-qiuyu-msft made me spend a few days looking into the custom authentication. I got the example running but I could not figure out how to combine that with client certificate authentication. Maybe it is doable but I do not have the skills for it.
The other path forward I think is to roll your own portal with custom authentication on regular ASP.net or your stack of choice. Then purchase PBI Premium and make use of the Javascript library that lets you send some sort of user token from your application into the embedded PBI report. That way I think you can use what ever authentication you like backed up by a custom users persistance.
In my project we probably will publish all reports we can to the web. The more sensative reports will be published on a portal built by a private company that in turn has a PBI Premium account.
Seems that I have to ask our internal software developers for a solution. Such a shame that Microsoft components don't work together out of the box.
Finally I found a solution by myself "out of the box". Well, not really OOTB - I had to take many hurdles - but it works.
Namely with Web Application Proxy (WAP), a feature in Windows Server 2016 (SSRS/PBIRS needs 2016), and Active Directory Federation Services (ADFS). I used this documentation: If you publish "https://reports.contoso.com/" (and not only "https://reports.contoso.com/reports/") you have a full-featured PBIRS accessible from extranet and authentication possible via Forms auth, Client certificate and even MFA:
https://docs.microsoft.com/en-us/power-bi/consumer/mobile/mobile-oauth-ssrs