Power BI Report Server Single Sign On

[Anonymous]

Dear All, 

I hope you are well and safe.

I've an on-premises Power BI Report Server installation. The server works under a domain account as a service account.

I need the users, under the same domain, to login automatically without being prompted to enter their windows account credentilas.

I checked the "rsreportserver" configuration file, the only authenticaton type I have is "RSWindowsNTLM />"

Any help would be appreciated. 

[d_gosbell · Accepted solution]

Normally if you are using NTLM auth you won't get prompted if the server is detected as being in your local network. So this possibly means that the browser thinks it might be an external site. So you might need to ask your IT department to help with getting your server identified as being an intranet based site (they can set this with group policy for the entire domain)

One quick test to see if this is the issue is to go into your Internet Options on your machine and do the following

1. Click on the Security tab

2, Click on Local Intranet

3. Click on Sites

4. Click on Advanced

5. Add the address for your report server in here

By default browsers will pass NTLM credentials to sites in the local intranet and trusted sites, but for sites they think are internet based they will not do this automatically and will prompt the user.

[Anonymous]

Dear @d_gosbell thank you a lot for your help. Can you please tell how to add my server to the intranet zone on the level of all domain users?

Thanks in advance. 

[d_gosbell]

---

@Anonymous wrote:

Dear @d_gosbell thank you a lot for your help. Can you please tell how to add my server to the intranet zone on the level of all domain users?

---

This is something that a domain admin would have to do. I've never done it myself, but I know it can be done through group policy settings. Googling for "group policy add site to intranet zone" turns up articles like this one https://blog.thesysadmins.co.uk/group-policy-internet-explorer-security-zones.html

[RobThrive]

@d_gosbell has the answer spot on, having done this a few months back myself (again had to ask the managed service provider (domain admin) to add it via group policy). However, for example if our users decide firefox is the way forward for them, you will need to ask your admin to also update firefox for everyone by setting the option "network.automatic-ntlm-auth.allow-non-fqdn" to true. this enables NTLM for local sites. I am sure chrome will have something similar.