Disable SSO

[Philipp_A]

Hello everyone,

just a simple question: is it possible to disable SSO when logging into PBI Report Server?

If yes, how? Haven't found anything particularly helpful online.

Cheers,

Philipp

[Philipp_A]

Hello @Poojara_D12,

your solution worked after I also removed the trused URI entry in Firefox. Thanks also @v-sdhruv!

[v-sdhruv]

Hi @Philipp_A ,

Just wanted to check if you had the opportunity to review the suggestions provided?

If any of the response has addressed your query, please accept it as a solution so other members can easily find it.
Thank You

[v-sdhruv]

Hi @Philipp_A ,

Sometimes, Chrome/Edge use Windows Integrated Authentication by default. You may want to adjust Group Policy or Local Security Policy to prevent automatic credential forwarding. Use Group Policy to disable automatic NTLM authentication for the Report Server URL.If you are using Firefox, remove the Report Server URL from trusted-urls.
Set EnableAuthPersistence to False  to force re-authentication.
You can try these fixes and let us know if it worked!
Thank you.

[Philipp_A]

Hi @Poojara_D12,

thanks for your quick Answer!

Ich modified the RSReportServer.config so that it looks like so:

<Authentication>
    <AuthenticationTypes>
      <RSWindowsNTLM />
    </AuthenticationTypes>
    <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
    <RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario>
    <EnableAuthPersistence>true</EnableAuthPersistence>
  </Authentication>

Restarted the PowerBI RS Service but it always doesn't ask for credentials. Tried with a different browser but it's the same.

Using Report Server May 2025 if thats important.

Best regards,

Philipp

[Poojara_D12 · Accepted solution]

Hi @Philipp_A 

Yes, it is possible to disable Single Sign-On (SSO) in Power BI Report Server by adjusting the server's authentication settings. By default, Power BI Report Server uses Integrated Windows Authentication, which automatically logs users in using their Windows credentials—this is what enables SSO. To disable this behavior, you need to modify the RSReportServer.config file, which is located in the Report Server installation directory. In this file, under the <AuthenticationTypes> section, you can remove or comment out the RSWindowsNegotiate line (which is responsible for enabling SSO) and keep only RSWindowsNTLM. This change forces the system to prompt users for credentials instead of logging them in automatically. Additionally, you may also need to adjust your browser settings to stop it from automatically passing Windows credentials. By making these changes, users will be required to manually enter their credentials each time they access the report server, effectively disabling SSO.