topic Re: Embedded tool authentication error in Developer

Embedded tool authentication error

Anonymous — Tue, 19 Nov 2019 08:47:54 GMT

I'm using the Power BI onboarding Embed tool (https://app.powerbi.com/embedsetup/appownsdata) and the sample code. When I try to access the Power BI report I get the message below (Unauthorized 401). The user credentials used in the code is an Admin of the Workspace. I have removed mutli-factor authentifcation from the user. Any ideas how to resolve this? Thank you.

Error

            Status: Unauthorized (401)
Response: 
RequestId: 7ba996d8-5b40-4103-9676-c150d5e8e959

Re: Embedded tool authentication error

Jayendran — Tue, 19 Nov 2019 09:08:35 GMT

Hi @Anonymous ,

Please cross check the task to perform from

https://docs.microsoft.com/en-us/power-bi/developer/register-app#register-with-the-power-bi-application-registration-tool

See some similar solutions

https://stackoverflow.com/questions/49491759/unauthorized-error-401-for-power-reports-embedding

See this troubleshotting guide

https://docs.microsoft.com/en-us/power-bi/developer/embedded-troubleshoot#api-call-returning-401

Re: Embedded tool authentication error

Anonymous — Tue, 19 Nov 2019 09:54:28 GMT

Hi @Jayendran .

Thank you for the suggestions.

I have tried registering the app and I get the following message. I have tried adding the parameter client secret under the line for key applicationID. I've tried adding it as key client_secret, clientsecret and applicationSecret but all return the same error.

Error

            AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.
Trace ID: 56de3d8b-110a-4e47-94b8-bbccf5f18d00
Correlation ID: 65111496-fb4b-4a3a-be60-178baebf5775
Timestamp: 2019-11-19 09:33:07Z

The App is registered to have access to every Power BI API permission.

Re: Embedded tool authentication error

Jayendran — Tue, 19 Nov 2019 09:59:51 GMT

Hi @Anonymous ,

Ah you don't need a client secret since this is a Native app.

Please see my answer below in Stackoverflow to convert your application into native app

https://stackoverflow.com/a/57274706

Re: Embedded tool authentication error

Anonymous — Tue, 19 Nov 2019 10:04:54 GMT

I have changed the client type to the setting Treat application as a publice client (Yes) and the follow error shows. Thanks.

Error

            AADSTS65001: The user or administrator has not consented to use the application with ID 'a3bac064-6935-4003-847f-47bf0f8d9989' named 'Power BI Test 5'. Send an interactive authorization request for this user and resource.
Trace ID: b7704ba0-781b-4b29-a962-0591a6cc7600
Correlation ID: 9a83f383-90ad-42a2-90ab-6d90425c4f7e
Timestamp: 2019-11-19 10:02:25Z

Re: Embedded tool authentication error

Jayendran — Tue, 19 Nov 2019 10:08:13 GMT

Hi @Anonymous ,

You are almost in the final stage ,

You need to be a global admin to provide the consent, you can grant the admin cosnent by the above image

Please don't forget to give kudo's or Thumbup for the replay which you got useful.

Re: Embedded tool authentication error

Anonymous — Tue, 19 Nov 2019 10:13:09 GMT

Is it the 'Grant admin conset for Allvotec' that I need to select in this screen shot? I guess that means I need my permissions upped to global admin? Thank you.

Re: Embedded tool authentication error

Jayendran — Tue, 19 Nov 2019 10:17:30 GMT

Hi @Anonymous ,

Yes from the screenshot currently you are not the global admin . So you need to add global admin access to your account or you need the help from anyone in your organization who is already having the global admin. can give you the consent.

Re: Embedded tool authentication error

Anonymous — Thu, 28 Nov 2019 12:53:44 GMT

@Jayendran, I finally managed to get an Admin to grant consent. Unfortunately, I'm getting the error:

Error Status: Unauthorized (401) Response: RequestId: 6336bc11-f5fd-4c25-a490-319ff32748eb

Re: Embedded tool authentication error

Jayendran — Thu, 28 Nov 2019 14:56:07 GMT

Hi @Anonymous

Pls check whether the user account is the Admin of the workspace.

401 means usually you don't have permission to the workspace.

Possbile solution would be

Check your user account is the Admin of the workspace
Verify that you are passing the workspace id correctly

Re: Embedded tool authentication error

Anonymous — Fri, 29 Nov 2019 14:18:51 GMT

@Jayendran @, you were right, somehow the workspace id was incorrect! It now works in debugging!

Unfortunately, I get the following error when accessing the deployed app url. I find this confusing as multi-factor authentication has been disabled.

Error AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000009-0000-0000-c000-000000000000'. Trace ID: 15de7ba9-f724-48ff-93da-4edae887d000 Correlation ID: c7084201-99cc-4b61-80c9-ebd9232c7c0a Timestamp: 2019-11-29 14:14:16Z

Re: Embedded tool authentication error

Jayendran — Fri, 29 Nov 2019 14:25:11 GMT

Hi @Anonymous ,

Somehow you have a policy in your Azure Active Directory which doesn't allow a user login without a MFA. Please contact your Azure Active Directory team and check them with this error.

Meanwhile I'd recommedn you to use a Service Principal(SPN) Approach rather than master account approach. Beacuse SPN is the best approach going forward.

Reference for SPN:

https://docs.microsoft.com/en-us/power-bi/developer/embed-service-principal