Add Azure Active Directory (AAD)-based Single Sign-On (SSO with OAuth) support for the Denodo connector
Add to the Denodo connector the capability of enabling Single Sign-On (SSO with OAuth) with Azure Active Directory (AAD).
Goal: the credentials of the users of PowerBI Service to flow all the way down to Denodo, with OAuth. That way, the users can benefit from the security policies they define in Denodo for users and roles, more control of who access what, etc.
The benefit for the customers is that they will have a full integration with Azure AD.
32 Comments
We want the credentials of the users of PowerBI Service to flow all the way down to Denodo with OAuth so users can benefit from the security policies we define in Denodo for users and roles, have more control of who access what, etc.
For our project, we also need desperately a close integration between PowerBI and Denodo through odbc connection without being in need of setting up a PowerBI Gateway, where both PowerBI and Denodo instances are on cloud. This will also enable us to use the single sign-on capability and transfer the AAD token all the way to Denodo to take care of the entitlement verifications.
We need this feature for better integration
Improved security integration between Denodo and PowerBI is beneficial for the mutual customers of both products and for both Denodo and Microsoft.
bpx Energy would like the PowerBI reports to reflect the permissions of the person accessing the report. This would uphold our data security policies.
It is a useful enhancement as, if implemented, we can use the single sign on using AAD from Power BI desktop. Currently we have it only in Online.
This can act as a big boon in our organisation. We heavily use PowerBI with Denodo, and we also use Denodo for centralising the user authorisation at finer level using row restrictions with roles based access control. Currently the support for SSO behaviour is supported using Kerberos over Denodo's ODBC driver, and because of its complex setup we have missed the milestones several times. Also, our organisation is moving towards more modern ways of enterprise authentication (using Azure AD) and authorisation (using oath 2.0 and SAML). This feature will greatly benefit our target state security architecture.
We have a growing base of users that use PowerBI Desktop and share content supported by PowerBI Gateway and PowerBI Service. Enabling AAD SSO with OAuth would significantly improve the user experience, so we would love to see this added.
Absolutely, that's what we need to integrate Power BI with Denodo data virtualisation !
We have use cases awaiting the implementation of this functionality.
