Forum Discussion

mannemlokesh's avatar
mannemlokesh
New Member
1 year ago
Solved

Can we integrate Keycloak as the Auth Server for SSO with Power BI Embedded?

Hi Team,

 

I'm currently working on embedding Power BI dashboards into my web application, and I’m looking to implement Single Sign-On (SSO) using Keycloak as the authentication provider.

 

My requirements are:

  1. Users should log in to my application through Keycloak.

  2. Once authenticated, when they navigate to a page with an embedded Power BI dashboard, they should be able to access it seamlessly without re-authentication (SSO).

  3. The dashboard access should be role-based, determined by the permissions assigned to the user in Keycloak.

  4. I also need to track which user accessed which dashboard, for auditing and monitoring purposes.

Is this kind of integration possible with Power BI Embedded and Keycloak? If yes, are there any recommended approaches or documentation you can point me to?

 

Thanks in advance!

Best,

Lokesh

Need Help
Tips and Tricks

4 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    1 year ago

    Hi mannemlokesh,

    Thanks for reaching out to the Microsoft fabric community forum.

    Power BI Embedded supports embedding for users using Azure AD tokens. Since Direct SSO from Keycloak to Power BI is not natively supported as an identity provider, but you can achieve seamless access by handling token issuance in your app post-Keycloak login, and Role-based access is achievable via RLS, with your app mapping Keycloak roles to dataset roles. For auditing, your app should maintain its own logging of user activity, as Power BI won't automatically recognize users from external identity providers in the App Owns Data model.

    You can go through the below links for reference:

    Overview of single sign-on for on-premises data gateways - Power BI | Microsoft Learn

    Power BI embedded analytics documentation - Power BI | Microsoft Learn

    Security in Power BI embedded analytics - Power BI | Microsoft Learn

     

    If I misunderstand your needs or you still have problems on it, please feel free to let us know.  

    Best Regards,
    Hammad.
    Community Support Team

     

    If this post helps then please mark it as a solution, so that other members find it more quickly.

    Thank you.

    • Anonymous's avatar
      Anonymous
      Not applicable
      1 year ago

      Hi mannemlokesh,

      As we haven’t heard back from you, so just following up to our previous message. I'd like to confirm if you've successfully resolved this issue or if you need further help.

      If yes, you are welcome to share your workaround and mark it as a solution so that other users can benefit as well. If you find a reply particularly helpful to you, you can also mark it as a solution.


      If you still have any questions or need more support, please feel free to let us know. We are more than happy to continue to help you.
      Thank you for your patience and look forward to hearing from you.

      • Anonymous's avatar
        Anonymous
        Not applicable
        1 year ago

        Hi mannemlokesh,

        I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution so that other community members can find it easily.


        Thank you.