Forum Discussion
Prompt all users to enter AD credentials when accessing PBIRS reports
- 5 years ago
Yes, kiosk PCs are a slightly different use case. If you want EVERYONE that connects to PBIRS to be prompted then you could switch from using Windows auth to using Basic auth (see https://docs.microsoft.com/en-us/sql/reporting-services/security/configure-basic-authentication-on-the-report-server?view=sql-server-ver15 ) Note: you should make sure you have HTTPS configured when using basic auth as the credentials are sent in clear text as part of the request.
The only issue then is that there is no "logout" button in the report portal, so the only way to "logout" is to close ALL browser windows. Closing just the current tab is not enough.
Thanks. Our case is a little different. We have many shared PCs at the stores and they are always ON using a generic kiosk account.
if users try to access the PBIRS url in the current scenario, the accesss uses the generic Kiosk as the login account to authenticate.
Since PBIRS is using the default Windows authentication and picking up the user from the machine, we have to somehow force the PBIRS url to ignore the PC credentials and just force every user to enter credentials when when getting the prompt box.
have done some research and seems doable using IIS, just don't have the proper documented steps for that.
Yes, kiosk PCs are a slightly different use case. If you want EVERYONE that connects to PBIRS to be prompted then you could switch from using Windows auth to using Basic auth (see https://docs.microsoft.com/en-us/sql/reporting-services/security/configure-basic-authentication-on-the-report-server?view=sql-server-ver15 ) Note: you should make sure you have HTTPS configured when using basic auth as the credentials are sent in clear text as part of the request.
The only issue then is that there is no "logout" button in the report portal, so the only way to "logout" is to close ALL browser windows. Closing just the current tab is not enough.