domain authorization

Yes, you can configure domain (Windows) authentication in Power BI Report Server (PBIRS) to allow users to log in without entering a username and password, provided they are on the same domain and using a browser that supports integrated authentication.

Steps to Configure Domain Authentication in PBIRS:

1. Enable Windows Authentication in PBIRS:

   • Open the Reporting Services Configuration Manager on the server where PBIRS is installed.
   • Go to Web Service URL and Web Portal URL sections.
   • Ensure that Windows Authentication is enabled.

2. Set up Kerberos Authentication (if needed):

   • Kerberos allows for seamless authentication across servers without re-entering credentials.
   • Configure SPNs (Service Principal Names) for the PBIRS URL if it’s running under a domain service account.
   • This step is optional but might be necessary if your setup involves multiple servers or if users still get prompted.

3. Configure Internet Explorer or Edge to Allow Integrated Authentication:

   • In Internet Explorer or Edge, go to Settings > Internet Options > Security > Local Intranet.
   • Add your PBIRS server URL to the Local Intranet zone.
   • Ensure that Automatic logon only in Intranet zone is enabled.
   • This step may vary for other browsers, but similar options are often available.

4. Modify Group Policies (if applicable):

   • Use Group Policy to push these browser settings across your organization if required.
   • Go to Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page.
   • Add the PBIRS URL to the Intranet Zone for seamless authentication.

5. Check Firewall and Network Settings:

   • Ensure that the users’ systems are connected to the same network domain and that no firewalls are blocking the necessary communication ports.

With these steps, users accessing PBIRS on the same domain should be automatically authenticated without needing to enter their credentials each time.