powerbi-gateway kerberosfor sso

[RanE]

Hello experts, 

I have just read the following artice about Use Kerberos for SSO from PowerBI to on premises data sources:
https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-kerberos-for-sso-pbi-to-on-premise...

I have a couple of questions:
1. What the pros of utilizing this option? Why would you want to go with this rather than the "traditional" power bi gateway that is currently offered? 
2.Is the preview version out there avaiable for download? i wasn't able to find any links to that. 
3. Is it an acceptable risk to have the gateway reside on the same system as the SQL Server when impersonation is configured, or should one have a separate server configured with constrained delegation?

Any other information/clarifications would be much appreciated!!
Thanks!

[v-qiuyu-msft]

Hi @RanE,

1. If we don't configure the data source use SSO, each user accesses the report will use the same credential which defined in SQL Server data source under Manage Gateways. While it has SSO configured, each user sees precisely the data for which they have permissions in the underlying data source rather than shared data caching across different users. 

2.  You can download the on-premise data gateway here: https://www.microsoft.com/en-us/download/details.aspx?id=53127

3. It's fine to have on-premise data gateway installed on the same machine as databases run. 

Best Regards,
Qiuyun Yu

[RanE]

@v-qiuyu-msft thanks for repyling!
Is it just then  a regular On-premises data gateway installation?
I have followed the link to download the on-premise data gateway. I thought it might be a different version of gateway.
(Like a preview version). 
Do i just download the gateway, install it, configure it per the instructions on the article  and then create a new data source (configure to use SSO?) on this gateway?

Thanks!

[v-qiuyu-msft · Accepted solution]

Hi @RanE,

It's not a preview on-premise data gateway version. You can download and install it as before, just add a new feature to the data gateway. Once the data gateway in online and you create a SQL Server data source, you will see the SSO option under Advanced Settings. But you need to configure the Kerberos Constrained Delegation carefully. Please follow the document closely. 

Best Regards,
Qiuyun Yu