Forum Discussion

rubenespap's avatar
rubenespap
Frequent Visitor
2 years ago
Solved

Service Principal Authentication on Web V2 connection type on On-Premises Data Gateway

Hi.   I've created a "Web V2" connection on the service (not on On-Premises Data Gateway) using Service Principal authentication and it works - validated through Data Pipeline.   Because I still ...
Dataflows
General Comment
General Question
  • rubenespap's avatar
    rubenespap
    2 years ago

    Conclusion: Unsupported.

     

    As per Microsoft documentation (Azure Data Lake Storage Gen2 - Power Query | Microsoft Learn😞

    • The service principal authentication type isn't supported when using an on-premises data gateway or a virtual network (VNet) data gateway.

     

    I've contacted Microsoft Fabric support, who told me there is no ETA for implementing this feature.

miguel's avatar
miguel
Community Admin
2 years ago

What sort of error are you receiving when trying to create the connection in a Dataflow Gen2?

Below is a screenshot of the input fields available to set up the connection to your REST API and the SPN authentication kind while using a Gateway:

 

  • rubenespap's avatar
    rubenespap
    Frequent Visitor
    2 years ago

    I'm trying to create the "Web V2" connection at https://admin.powerplatform.microsoft.com/ext/DataGateways, not in the Dataflow Gen2 "Get data" option.

     

    Is "Web API" (on Dataflow Gen2 Get data) the same as "Web V2" (on the Power Platform Admin)?

     

    Assuming a positive answer, where do I in Dataflow Gen2 "Get data" option with Service Principal configure the "Token Audience Uri" (the API permission GUID from App Registration)?

     

    I ask because when I try to create a "Web API" on Dataflow Gen2 "Get data" option with Service Principal and do not provide the "Token Audience Uri" I get the following error:

    Unexpected error (Session ID: cc68f043-46fa-42e5-b120-bfe6d9098440, Region: europe)

     

    In the same way, if I try to create a "Web V2" as a "Cloud" connection with Service Principal on the Power Platform Admin and don't provide the "Token Audience Uri" i get the following error:

     

    Unable to create connection for the following reason: Failed to login with OAuth token, please update the credential manually and retry.

    Details:

    Please have this information handy if you choose to create a support ticket.

    Session Id: xxxxxxxx-1048-4701-9872-75dc40e1ab43
    RequestId: xxxxxxxx-6bb4-411d-99e4-ad40d3dce62d
    Cluster URI: https://api.powerbi.com
    Status code: 400
    Time: Tue Mar 12 2024 xx:xx:xx GMT+0000 (Western European Standard Time)

     

    If I provide the "Token Audience Uri" it works.

    • miguel's avatar
      miguel
      Community Admin
      2 years ago

      The link that you've shared for  https://admin.powerplatform.microsoft.com/ext/DataGateways is exclusively to be used with the PowerPlatform dataflows. Not the Fabric nor the Power BI Dataflows. They do not share the same credential storages.

      The correct url to use in Fabric would be --> https://app.powerbi.com/groups/me/gateways 

       

      Nevertheless, if you are planning to use a connection inside of Dataflow Gen2 then we recommend creating the connection inside of Dataflow Gen2.

       

      If what you're trying to do is create a connection for a Web activity in Data Pipeline, then please let us know. Web V2 is only for Data Pipelines.