topic Re: Disable SSO in Report Server

Disable SSO

Philipp_A — Tue, 08 Jul 2025 07:34:02 GMT

Hello everyone,

just a simple question: is it possible to disable SSO when logging into PBI Report Server?

If yes, how? Haven't found anything particularly helpful online.

Cheers,

Philipp

Re: Disable SSO

Poojara_D12 — Tue, 08 Jul 2025 08:51:53 GMT

Hi Philipp_A

Yes, it is possible to disable Single Sign-On (SSO) in Power BI Report Server by adjusting the server's authentication settings. By default, Power BI Report Server uses Integrated Windows Authentication, which automatically logs users in using their Windows credentials—this is what enables SSO. To disable this behavior, you need to modify the RSReportServer.config file, which is located in the Report Server installation directory. In this file, under the <AuthenticationTypes> section, you can remove or comment out the RSWindowsNegotiate line (which is responsible for enabling SSO) and keep only RSWindowsNTLM. This change forces the system to prompt users for credentials instead of logging them in automatically. Additionally, you may also need to adjust your browser settings to stop it from automatically passing Windows credentials. By making these changes, users will be required to manually enter their credentials each time they access the report server, effectively disabling SSO.

Re: Disable SSO

Philipp_A — Wed, 09 Jul 2025 06:45:03 GMT

Hi Poojara_D12,

thanks for your quick Answer!

Ich modified the RSReportServer.config so that it looks like so:

<Authentication> <AuthenticationTypes> <RSWindowsNTLM /> </AuthenticationTypes> <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel> <RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario> <EnableAuthPersistence>true</EnableAuthPersistence> </Authentication>

Restarted the PowerBI RS Service but it always doesn't ask for credentials. Tried with a different browser but it's the same.

Using Report Server May 2025 if thats important.

Best regards,

Philipp

Re: Disable SSO

v-sdhruv — Wed, 09 Jul 2025 11:06:16 GMT

Hi Philipp_A ,

Sometimes, Chrome/Edge use Windows Integrated Authentication by default. You may want to adjust Group Policy or Local Security Policy to prevent automatic credential forwarding. Use Group Policy to disable automatic NTLM authentication for the Report Server URL.If you are using Firefox, remove the Report Server URL from trusted-urls.
Set EnableAuthPersistence to False to force re-authentication.
You can try these fixes and let us know if it worked!
Thank you.

Re: Disable SSO

v-sdhruv — Wed, 16 Jul 2025 12:31:30 GMT

Hi Philipp_A ,

Just wanted to check if you had the opportunity to review the suggestions provided?

If any of the response has addressed your query, please accept it as a solution so other members can easily find it.
Thank You

Re: Disable SSO

Philipp_A — Fri, 18 Jul 2025 09:47:18 GMT

Hello Poojara_D12,

your solution worked after I also removed the trused URI entry in Firefox. Thanks also v-sdhruv!