Forum Discussion

Abdelmajid's avatar
Abdelmajid
Helper I
5 years ago

PBIRS default Windows Authentication

Hello,

 

I have two different Power BI environmnet both using the defauly Windows authentication:

 

--->Dev: Prompt me to enter my crednetials when I hit the Dev URL.

<AuthenticationTypes>
<RSWindowsNegotiate/>
<RSWindowsNTLM/>
</AuthenticationTypes>
<RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
<RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario>
<EnableAuthPersistence>true</EnableAuthPersistence>

 

--->QA: Doesn't prompt me to enter my credentials when I hit the QA URL.

<AuthenticationTypes>
<RSWindowsNegotiate/>
<RSWindowsNTLM/>
</AuthenticationTypes>
<RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
<RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario>
<EnableAuthPersistence>true</EnableAuthPersistence>

 

Any idea why the envireonments are behaving diffrently regarding the propmt for credentials piece? 

 

Thanks

 

 

 

PBIRS default Windows Authentication

3 Replies

  • d_gosbell's avatar
    d_gosbell
    Super User
    5 years ago

    So this could happen if your dev server is in a different domain to your client machine. Or if your browser does not recognize the dev url as being in the intranet zone.

    • Abdelmajid's avatar
      Abdelmajid
      Helper I
      5 years ago

      Thanks d_gosbell 

      Is there any way to force all environments to promt users for credentilas knowing that they all have the default Windows authentication? 

      • d_gosbell's avatar
        d_gosbell
        Super User
        5 years ago
        Abdelmajid wrote:

        Thanks d_gosbell 

        Is there any way to force all environments to promt users for credentilas knowing that they all have the default Windows authentication? 

        So windows auth is specificly designed to avoid re-prompting users for their password if it can. I'm not a windows auth expert, but the only way I know of doing this globally is to make a group policy change in your domain to set the urls of your pbirs servers to the "internet" zone.