Forum Discussion
Refresh data from VPN-secured Salesforce
I got a reply from MS support
Credential acquisition and connection test are always happening from the Power BI Service. so there is no currently a workaround on our side.
It’s happen because SF is an online data source, so it will never use the PSW
But even if the data source itself ends up using a gateway, all OAuth in DMTS happens entirely in the cloud.
It seems to be true - PowerBI checks credentials online first.
To workaround, we use some trick with Salesforce DataLoader to export all data into CSV first on the machine connected to VPN and then access that CSV with the gateway.
Hi Anonymous,
As you mentioned this dataset use personal gateway, is there any other data source in the report which requires gateway? If there is only Salesforce reports data source in the report, it doesn't require any gateway once publish to service. If your dataset indeed use personal because of other data source, please configure the personal gateway with proxy follow this article.
Besides, based on my test, if I create a report in desktop which only connects to the Salesforce Reports, after publish to service, we are not able to edit credential and get the same error as yours. I will report this issue internally, and update here once get feedback.
Best Regards,
Qiuyun Yu
Hi Qiuyun, thank you for the answer.
The main reason to use the gateway is that Salesforce is VPN-protected, so app.powerbi.com can't connect to Salesforce.com directly.
The interesting thing I found from Salesforce logs - after I enter credentials in dataset settings, app.powerbi.com tries to connect directly and in Salesforce log I see rejected login attempt from Microsoft IP addresses. It's pretty strange because credentials are for the Gateway and it is not supposed that Azure will try to connect Salesforce directly during credentials editing process.
Hi Anonymous,
Please run the Fiddler, then repeat the steps to edit the credential for salesforce. Share .saz file with us.
Best Regards,
Qiuyun Yu