Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
jamesh
Employee
Employee

Will constrained delegation using Kerberos be supported?

Regardless of the complexity of SSO we still have customers that want to "secure" everything they do with constrained delegation and in some instances see it as a show stopper.  Is there any plan to bring this into the product?

 

Thanks, James

1 REPLY 1
regbac
Regular Visitor

Waow, this is a very interesting question.

 

I suppose that they want to use KCD in regard to their on-premises data sources otherwise I don't see it makes sense.

And the only on-premises data source that there truely is right now is SSAS Tabular, which supports and uses the EffectiveUserName property.

 

The EffectiveUserName property is a real Kerberos "killer" as it push the username down to the data source eliminating the need for delegating credentials. This way you get row level security without the need for setting up KCD.

 

If it becomes supported you will still need to setup Azure AD and Azure AD Application Proxy and then use an Azure AD Application proxy connector on you on-prem side. If these are 2 different domains you will have even more challenges before it works.

 

So for now, I will stay with the EffectiveUserName property if it's a viable solution for you.

 

Cheers

 

Régis

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.

Top Solution Authors
Top Kudoed Authors