Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
9 years ago

Enterprise Gateway still using OnMicrosoft.com when passing EffectiveUserName even after UPN changed

I've got a EG that was setup initially before we had AD Syncronization working.  We were working with standard OnMicrosoft.com accounts.  We have now syncronized AD and I've updated my UPN to not include the OnMicrosoft.com (i.e. I was [email protected], now I'm [email protected]).  I sign into the Power BI Service with [email protected] and when I click on the person icon in the Power BI Service I see [email protected] it appears that the UPN without "onmicrosoft.com" is in use.

 

I've got a connection defined to an SSAS multidimensional cube and the only way I can get connected via the EG is to enter a UPN map in the enterprise gateway data source definition like [email protected], map to [email protected] (or acme.onmicrosoft.com to acme.com).

 

So... it appears me that even though the person icon shows me signed as as [email protected] what the EG is really seeing is [email protected].

 

I've checked the EG logs and I do see the replacements being made in there which reflect this behaviour.

 

I'm pretty sure when I installed the EG I would have entered the [email protected] ID when signing in during the install.  Don't know if that somehow has burned the onmicrosoft.com into things or not.

 

Any ideas.  The overall goal it to get everyone signing into Power BI Service with non "onmicrosoft.com" addresses and to eliminate the need for any mappings. 

 

I'm feeling like there is some remenat in the Azure AD reflecting OnMicrosoft.com for my accounts that is causing this behaviour even though I'm signing in with the non OnMicrosoft.com UPN.

 

Any help is greatly appreciated.

Need Help

2 Replies

  • v-qiuyu-msft's avatar
    v-qiuyu-msft
    Community Support
    9 years ago

    Hi Anonymous,

     

    From your description, it seems that you used [email protected] signed in Power BI service, and used the [email protected] signed in on-premise data gateway, right?

     

    As you register the data gateway use [email protected], the default gateway administrator should be [email protected]. If you shared this gateway with [email protected] like below, then this gateway will display in Power BI servcie use [email protected] account.

     

     

     

    In your scenario, did you connect to SSAS cube in live connection or import mode? If it's live connection, check this requirements firstly: Limitations of Analysis Services live connections. Then please follow this article to set user mapping roles: Usernames with Analysis Services.

     

     

    Best Regards,
    Qiuyun Yu

     

     

    • Anonymous's avatar
      Anonymous
      Not applicable
      9 years ago

      Qiuyun,

       

      Thanks for the response.  Heres some shots of what I'm seeing.  Hopefully this can help to shed some light on it a bit.

       

      In my gateway it does show my name although I can't see the fully qualified name. 

       

       

      I see the following when I'm signed into the service.  I actualy signin using my email address [email protected].  Its being converted to Exxxxxxx.companyname.com.  This is my current UPN we see in Azure AD. 

       

       

       

       

      For my SSAS connections I'm doing the direct connect, not the import, so the connections are flowing straight thorugh to the gateway in real time.

       

      If I don't put any User "UPN" Mappings on the gateway's data source defintion for the SSAS connection the enterprise gateway logs show the "The user name or password is incorrect." and the EffectiveUsername appears with the OnMicrosoft.com in it.....  I'm forced to put a UPN mapping in that maps [email protected] to [email protected] to get it to connect.

       

       

       

      So I'm confused as to where its picking up the OnMicrosoft.com when sending dowh the EffectiveUserName.  It is likley that I used [email protected] when I initially installed and registered the gateway.   IF I go to the gateway machine today and start the gateway app I'm prompted to signin and I am using [email protected] and its getting me in there fine.  From there I see the links to the log files and can export them. 

       

      I do know we are using multiple federated domains.  I don't know if that plays into how the domain name is selected that is passed down to the gateway.