Forum Discussion
Disable SSO
Hello everyone,
just a simple question: is it possible to disable SSO when logging into PBI Report Server?
If yes, how? Haven't found anything particularly helpful online.
Cheers,
Philipp
Hi Philipp_A
Yes, it is possible to disable Single Sign-On (SSO) in Power BI Report Server by adjusting the server's authentication settings. By default, Power BI Report Server uses Integrated Windows Authentication, which automatically logs users in using their Windows credentials—this is what enables SSO. To disable this behavior, you need to modify the RSReportServer.config file, which is located in the Report Server installation directory. In this file, under the <AuthenticationTypes> section, you can remove or comment out the RSWindowsNegotiate line (which is responsible for enabling SSO) and keep only RSWindowsNTLM. This change forces the system to prompt users for credentials instead of logging them in automatically. Additionally, you may also need to adjust your browser settings to stop it from automatically passing Windows credentials. By making these changes, users will be required to manually enter their credentials each time they access the report server, effectively disabling SSO.
5 Replies
Hi Philipp_A
Yes, it is possible to disable Single Sign-On (SSO) in Power BI Report Server by adjusting the server's authentication settings. By default, Power BI Report Server uses Integrated Windows Authentication, which automatically logs users in using their Windows credentials—this is what enables SSO. To disable this behavior, you need to modify the RSReportServer.config file, which is located in the Report Server installation directory. In this file, under the <AuthenticationTypes> section, you can remove or comment out the RSWindowsNegotiate line (which is responsible for enabling SSO) and keep only RSWindowsNTLM. This change forces the system to prompt users for credentials instead of logging them in automatically. Additionally, you may also need to adjust your browser settings to stop it from automatically passing Windows credentials. By making these changes, users will be required to manually enter their credentials each time they access the report server, effectively disabling SSO.
Hi Poojara_D12,
thanks for your quick Answer!
Ich modified the RSReportServer.config so that it looks like so:
<Authentication> <AuthenticationTypes> <RSWindowsNTLM /> </AuthenticationTypes> <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel> <RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario> <EnableAuthPersistence>true</EnableAuthPersistence> </Authentication>Restarted the PowerBI RS Service but it always doesn't ask for credentials. Tried with a different browser but it's the same.
Using Report Server May 2025 if thats important.
Best regards,
Philipp
Hi Philipp_A ,
Sometimes, Chrome/Edge use Windows Integrated Authentication by default. You may want to adjust Group Policy or Local Security Policy to prevent automatic credential forwarding. Use Group Policy to disable automatic NTLM authentication for the Report Server URL.If you are using Firefox, remove the Report Server URL from trusted-urls.
Set EnableAuthPersistence to False to force re-authentication.
You can try these fixes and let us know if it worked!
Thank you.Hello Poojara_D12,
your solution worked after I also removed the trused URI entry in Firefox. Thanks also v-sdhruv!
