Forum Discussion

rubenespap's avatar
rubenespap
Frequent Visitor
2 years ago
Solved

Service Principal Authentication on Web V2 connection type on On-Premises Data Gateway

Hi.   I've created a "Web V2" connection on the service (not on On-Premises Data Gateway) using Service Principal authentication and it works - validated through Data Pipeline.   Because I still ...
Dataflows
General Comment
General Question
  • rubenespap's avatar
    rubenespap
    2 years ago

    Conclusion: Unsupported.

     

    As per Microsoft documentation (Azure Data Lake Storage Gen2 - Power Query | Microsoft Learn😞

    • The service principal authentication type isn't supported when using an on-premises data gateway or a virtual network (VNet) data gateway.

     

    I've contacted Microsoft Fabric support, who told me there is no ETA for implementing this feature.

rubenespap's avatar
rubenespap
Frequent Visitor
2 years ago

My problem happens before adding Dataflows Gen2 or Data Pipelines to the mix. It's while creating the "Connection" - before reporting and even before data loading.

 

So... I'm afraid I haven't explained myself well enough. 🙄

 

I'll try again.

 

To access data from the Fabric Service (or Power BI Service, or Power Platform) in an enterprise environment we need at least one "Connection" configured, that must be configured either through "On-Premises" (using a Power BI Gateway), "Virtual Network" or "Cloud" (directly on the service) - quotes are Microsoft's own terms.

 

Those connections can be "SQL Server", "Azure SQL Server", "Oracle", "OData", "SharePoint", "Web" or "Web V2", to name just a few.

 

My data source is a REST service that's behind Service Principal authentication.

 

So I've created a "Web V2" connection on "Cloud" and that has Service Principal as an option. I've tested it with Data Pipeline and it works. Next step was to use it through Dataflows Gen2.

 

Problem #1: Dataflows Gen2 doesn't (yet?) support "Cloud" connections.

 

Problem #2: When I tried to recreate that same connection "On-Premises", Service Principal authentication is not an option.

 

And here I am.

 

I hope it's clear now.

Element115's avatar
Element115
Icon for Memorable Member rankMemorable Member
2 years ago

Yes,  thank you. It's clear now.  With the on-prem connection, have you tried authenticating using OAuth 2.0? And if yes, what result did you get?

  • rubenespap's avatar
    rubenespap
    Frequent Visitor
    2 years ago

    I have tried, but OAuth 2.0 forces an Azure authentication which doesn't accept the Service Principal ("App Registration") authentication scheme - and that particular REST service only accepts Service Principal authentication.