Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
RanE
Frequent Visitor

powerbi-gateway kerberosfor sso

Hello experts, 

I have just read the following artice about Use Kerberos for SSO from PowerBI to on premises data sources:
https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-kerberos-for-sso-pbi-to-on-premise...


I have a couple of questions:
1. What the pros of utilizing this option? Why would you want to go with this rather than the "traditional" power bi gateway that is currently offered? 
2.Is the preview version out there avaiable for download? i wasn't able to find any links to that. 
3. Is it an acceptable risk to have the gateway reside on the same system as the SQL Server when impersonation is configured, or should one have a separate server configured with constrained delegation?

Any other information/clarifications would be much appreciated!!
Thanks!

1 ACCEPTED SOLUTION

Hi @RanE,

 

It's not a preview on-premise data gateway version. You can download and install it as before, just add a new feature to the data gateway. Once the data gateway in online and you create a SQL Server data source, you will see the SSO option under Advanced Settings. But you need to configure the Kerberos Constrained Delegation carefully. Please follow the document closely. 

 

Best Regards,
Qiuyun Yu

Community Support Team _ Qiuyun Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

3 REPLIES 3
v-qiuyu-msft
Community Support
Community Support

Hi @RanE,

 

1. If we don't configure the data source use SSO, each user accesses the report will use the same credential which defined in SQL Server data source under Manage Gateways. While it has SSO configured, each user sees precisely the data for which they have permissions in the underlying data source rather than shared data caching across different users. 

 

2.  You can download the on-premise data gateway here: https://www.microsoft.com/en-us/download/details.aspx?id=53127

 

3. It's fine to have on-premise data gateway installed on the same machine as databases run. 

 

Best Regards,
Qiuyun Yu

Community Support Team _ Qiuyun Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

@v-qiuyu-msft thanks for repyling!
Is it just then  a regular On-premises data gateway installation?
I have followed the link to download the on-premise data gateway. I thought it might be a different version of gateway.
(Like a preview version). 
Do i just download the gateway, install it, configure it per the instructions on the article  and then create a new data source (configure to use SSO?) on this gateway?

Thanks!

Hi @RanE,

 

It's not a preview on-premise data gateway version. You can download and install it as before, just add a new feature to the data gateway. Once the data gateway in online and you create a SQL Server data source, you will see the SSO option under Advanced Settings. But you need to configure the Kerberos Constrained Delegation carefully. Please follow the document closely. 

 

Best Regards,
Qiuyun Yu

Community Support Team _ Qiuyun Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
July 2024 Power BI Update

Power BI Monthly Update - July 2024

Check out the July 2024 Power BI update to learn about new features.

PBI_Carousel_NL_June

Fabric Community Update - June 2024

Get the latest Fabric updates from Build 2024, key Skills Challenge voucher deadlines, top blogs, forum posts, and product ideas.

Top Solution Authors
Top Kudoed Authors