Errors with status 401 *** Power BI Report Server (Custom Authentication)

[hejazi]

I have a Power BI Report Server (May 2021) running with custom forms authentication and now have problems with Chrome browser not showing custom visuals.

Looking at the Chrome console shows that Chrome blocks cookies if SameSite is not set and Secure(SSL) is not set to true.

This gives me various errors (with status 401) ...

To the enduser looking at a PowerBI report the only problem is that custom visuals are not shown. The rest of the report works as expected.

Safari (iOS), Firefox, Edge (Chromium) and IE11 do not have this problem, but will in the near future as there are warnings that SameSite in not set - but no errors for now.

I set cookieSameSite="None" in my web.config of the login website where my auth cookie is generated.

The same setting I made in the web.config of the Power BI report server, but I think that Power BI Report Server (May 2021) is currently not using the samesite setting.

Setting Chrome flags "SameSite by default cookies" to disabled is a workaround for Chrome - but I don't want to tell my users to disable the setting and get a security issue ... 😉

Any thoughts what to change to make Chrome and Custom Visuals work again?

[v-deddai1-msft]

Hi @hejazi ,

Do the incognito window work?

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Best Regards,

Dedmon Dai

[d_gosbell]

Custom Visuals are loaded in iframes for security reasons to limit their access to the report and data, but this can cause issues with custom cookies. I think the simplest fix is probably to implement SSL and have your cookies marked as secure.