Forum Discussion
Can we integrate Keycloak as the Auth Server for SSO with Power BI Embedded?
Hi mannemlokesh,
Thanks for reaching out to the Microsoft fabric community forum.
Power BI Embedded supports embedding for users using Azure AD tokens. Since Direct SSO from Keycloak to Power BI is not natively supported as an identity provider, but you can achieve seamless access by handling token issuance in your app post-Keycloak login, and Role-based access is achievable via RLS, with your app mapping Keycloak roles to dataset roles. For auditing, your app should maintain its own logging of user activity, as Power BI won't automatically recognize users from external identity providers in the App Owns Data model.
You can go through the below links for reference:
Overview of single sign-on for on-premises data gateways - Power BI | Microsoft Learn
Power BI embedded analytics documentation - Power BI | Microsoft Learn
Security in Power BI embedded analytics - Power BI | Microsoft Learn
If I misunderstand your needs or you still have problems on it, please feel free to let us know.
Best Regards,
Hammad.
Community Support TeamIf this post helps then please mark it as a solution, so that other members find it more quickly.
Thank you.
Hi mannemlokesh,
As we haven’t heard back from you, so just following up to our previous message. I'd like to confirm if you've successfully resolved this issue or if you need further help.
If yes, you are welcome to share your workaround and mark it as a solution so that other users can benefit as well. If you find a reply particularly helpful to you, you can also mark it as a solution.
If you still have any questions or need more support, please feel free to let us know. We are more than happy to continue to help you.
Thank you for your patience and look forward to hearing from you.
Hi mannemlokesh,
I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution so that other community members can find it easily.
Thank you.
Hi mannemlokesh,
May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.
Thank you.