Can we integrate Keycloak as the Auth Server for SSO with Power BI Embedded?

[mannemlokesh]

Hi Team,

I'm currently working on embedding Power BI dashboards into my web application, and I’m looking to implement Single Sign-On (SSO) using Keycloak as the authentication provider.

My requirements are:

1. Users should log in to my application through Keycloak.

2. Once authenticated, when they navigate to a page with an embedded Power BI dashboard, they should be able to access it seamlessly without re-authentication (SSO).

3. The dashboard access should be role-based, determined by the permissions assigned to the user in Keycloak.

4. I also need to track which user accessed which dashboard, for auditing and monitoring purposes.

Is this kind of integration possible with Power BI Embedded and Keycloak? If yes, are there any recommended approaches or documentation you can point me to?

Thanks in advance!

Best,

Lokesh

[Anonymous · Accepted solution]

Hi @mannemlokesh,

Thanks for reaching out to the Microsoft fabric community forum.

Power BI Embedded supports embedding for users using Azure AD tokens. Since Direct SSO from Keycloak to Power BI is not natively supported as an identity provider, but you can achieve seamless access by handling token issuance in your app post-Keycloak login, and Role-based access is achievable via RLS, with your app mapping Keycloak roles to dataset roles. For auditing, your app should maintain its own logging of user activity, as Power BI won't automatically recognize users from external identity providers in the App Owns Data model.

You can go through the below links for reference:

Overview of single sign-on for on-premises data gateways - Power BI | Microsoft Learn

Power BI embedded analytics documentation - Power BI | Microsoft Learn

Security in Power BI embedded analytics - Power BI | Microsoft Learn

If I misunderstand your needs or you still have problems on it, please feel free to let us know.  

Best Regards,
Hammad.
Community Support Team

If this post helps then please mark it as a solution, so that other members find it more quickly.

Thank you.

[Anonymous]

Hi @mannemlokesh,

As we haven’t heard back from you, so just following up to our previous message. I'd like to confirm if you've successfully resolved this issue or if you need further help.

If yes, you are welcome to share your workaround and mark it as a solution so that other users can benefit as well. If you find a reply particularly helpful to you, you can also mark it as a solution.

If you still have any questions or need more support, please feel free to let us know. We are more than happy to continue to help you.
Thank you for your patience and look forward to hearing from you.

[Anonymous]

Hi @mannemlokesh,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution so that other community members can find it easily.

Thank you.

[Anonymous]

Hi @mannemlokesh,

May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.

Thank you.