Forum Discussion
Helper IPrompt all users to enter AD credentials when accessing PBIRS reports
Yes, kiosk PCs are a slightly different use case. If you want EVERYONE that connects to PBIRS to be prompted then you could switch from using Windows auth to using Basic auth (see https://docs.microsoft.com/en-us/sql/reporting-services/security/configure-basic-authentication-on-the-report-server?view=sql-server-ver15 ) Note: you should make sure you have HTTPS configured when using basic auth as the credentials are sent in clear text as part of the request.
The only issue then is that there is no "logout" button in the report portal, so the only way to "logout" is to close ALL browser windows. Closing just the current tab is not enough.
Super UserI'm pretty sure that the decision of whether to prompt for credentials is made by the client machine, by default if the url is detected as being in the Intranet or Trusted Sites zones (which you configure either using Group Policy or in the Internet Options on the client machines). If you configured the PBIRS url to be in the Intranet zone the browsers will no longer pass through the credentials. If you only require this as a once off another option is to try using an private/incognito window in your browser.
I have configured our PBIRS server to use WindowsNTLM authentication, and users are sometimes asked for credentials, sometimes not (I haven't noticed a pattern yet). Note: this is direct webpage access, not using PBI DesktopRS. Since PBIRS is supposed to be connection-oriented, rather than session-oriented, shouldn't users be being prompted every time they first access the server for the day? And where are their credentials being cached, so they don't have to enter them for every click they do within PBIRS? If it makes any difference, our "workstation" is usually an RDSH server, but it is possible to go directly from the Win10 workstations as well.
Thank you, Roger