Forum Discussion
Impactful IndividualSingle Sign On in Power BI
I need to integrate Single Sign On in Power BI , example if user login into a web application using his or her organization credentials then same credentials should be used to login in Power BI service without entering credentials again
Hello powerbiexpert22
To enable Single Sign-On (SSO) in Power BI, your web application and Power BI service must both authenticate through the same Azure Active Directory tenant. You first register your web app in Azure AD, grant it Power BI API permissions, and configure it with the necessary client credentials. In Power BI’s admin portal, you enable embedding and set up the required security access. When a user signs into your web app with their organizational credentials, the app can silently exchange that Azure AD token for a Power BI access token, eliminating the need for the user to log in again. The Power BI JavaScript SDK is then used to embed reports in the application, passing the access token behind the scenes. Since tokens expire, silent token renewal is required to maintain seamless access. With delegated permissions, each user sees only the content they are authorized for, providing a true SSO experience within Power BI.
6 Replies
- pankajnamekar25
Super User
Hello powerbiexpert22
To enable Single Sign-On (SSO) in Power BI, your web application and Power BI service must both authenticate through the same Azure Active Directory tenant. You first register your web app in Azure AD, grant it Power BI API permissions, and configure it with the necessary client credentials. In Power BI’s admin portal, you enable embedding and set up the required security access. When a user signs into your web app with their organizational credentials, the app can silently exchange that Azure AD token for a Power BI access token, eliminating the need for the user to log in again. The Power BI JavaScript SDK is then used to embed reports in the application, passing the access token behind the scenes. Since tokens expire, silent token renewal is required to maintain seamless access. With delegated permissions, each user sees only the content they are authorized for, providing a true SSO experience within Power BI.
powerbiexpert22Hi jaineshp , do i need to embed each and every power bi pagineted report into web app? is there a way to avoid embedding each and every pagineted report to avoid spending lot of time on embeding?
- Natalie_iTalent
Administrator
Hello powerbiexpert22, the comment you are responding to has been removed.
Best,
Natalie H.
Community Manager
- Shahid12523
Community Champion
Power BI supports SSO via Azure AD (Entra ID).
If users are in Microsoft 365, SSO happens automatically in the browser.
For a custom web app (embedded Power BI) → after user logs in with org credentials, reuse the Azure AD access token (via MSAL) to access Power BI without extra login.
In short: enable Azure AD SSO and reuse the same token for Power BI.
v-veshwara-msftCommunity Support
Hi powerbiexpert22 ,
Just following up to check if you had a chance to review the suggestions shared by pankajnamekar25 , jaineshp , and Shahid12523 regarding Single Sign-On.
Also, was the information provided by jaineshp about embedding each Power BI paginated report into a web app helpful?
If you still need any assistance, please let us know.
Thank you.- v-veshwara-msft
Hi powerbiexpert22 ,
Just wanted to check if the responses provided were helpful. If further assistance is needed, please reach out.
Thank you.
