Forum Discussion

pauljevans's avatar
pauljevans
Helper I
3 years ago
Solved

Error: "Creating embed token with effective identity is not supported for this datasource"

Embedding for our customers, and one of them is now getting this error on a few on their client workspaces.

 

 

And here's the dataset in question... Telling us to do Effective Identity.  Unsure what is going on.  

 

  • My guess - your Azure SQL is configured with SSO enabled.

    In "app owns data" scenario Power BI only has the embed token, which can't be used to access the data source.

    You should either turn off SSO through Power BI portal, or if you wish to keep SSO enabled then in generate embed token request provide the token for accessing the data source in "identity blob" property

5 Replies

    • AmosHersch's avatar
      AmosHersch
      Microsoft Employee

      Hi pauljevans I think that the error message might be misleading. AFAIK this error refers specifically to the identityBlob (token) property of the effective identity. The rules for this property are as follows:

      1. If your model is AS on-prem or Azure AS - you must not provide identity blob

      2. If your model is in Power BI dataset - you must provide identity blob if you have SSO enabled, since that's the token Power BI will use for connecting to the data source - Is it posible you have SSO enabled, but you didn't provide the identityBlob to connect to the data source?

      • pauljevans's avatar
        pauljevans
        Helper I

        Good info to know thank you. We are not setting up identity blob, it's a "app owns data" setup using B2C local logins to auth users. 

        After working with the data person, dataset has data source mix of DataFlows (legacy), DataFlows, and azure SQL

  • AmosHersch's avatar
    AmosHersch
    Microsoft Employee

    My guess - your Azure SQL is configured with SSO enabled.

    In "app owns data" scenario Power BI only has the embed token, which can't be used to access the data source.

    You should either turn off SSO through Power BI portal, or if you wish to keep SSO enabled then in generate embed token request provide the token for accessing the data source in "identity blob" property

    • pauljevans's avatar
      pauljevans
      Helper I

      Not sure if this is the solution, but learned a lot. Thank you for your time. Lol.