Error: "Creating embed token with effective identity is not supported for this datasource"

[pauljevans]

Embedding for our customers, and one of them is now getting this error on a few on their client workspaces.

And here's the dataset in question... Telling us to do Effective Identity.  Unsure what is going on.  

[AmosHersch · Accepted solution]

My guess - your Azure SQL is configured with SSO enabled.

In "app owns data" scenario Power BI only has the embed token, which can't be used to access the data source.

You should either turn off SSO through Power BI portal, or if you wish to keep SSO enabled then in generate embed token request provide the token for accessing the data source in "identity blob" property

[pauljevans]

Not sure if this is the solution, but learned a lot. Thank you for your time. Lol. 

[pauljevans]

Reports do come up just fine in their power bi web portal

[AmosHersch]

Hi @pauljevans I think that the error message might be misleading. AFAIK this error refers specifically to the identityBlob (token) property of the effective identity. The rules for this property are as follows:

1. If your model is AS on-prem or Azure AS - you must not provide identity blob

2. If your model is in Power BI dataset - you must provide identity blob if you have SSO enabled, since that's the token Power BI will use for connecting to the data source - Is it posible you have SSO enabled, but you didn't provide the identityBlob to connect to the data source?

[pauljevans]

Good info to know thank you. We are not setting up identity blob, it's a "app owns data" setup using B2C local logins to auth users. 

After working with the data person, dataset has data source mix of DataFlows (legacy), DataFlows, and azure SQL