domain authorization

[pavel118]

Good afternoon

Can I configure domain authorization in PBIRS.

I want the user to not enter a username and password when logging in.

[v-jtian-msft]

Hello,@SolomonovAnton ,thanks for your concern about this issue.

Your answer is excellent!
And I would like to share some additional solutions below.

Hi,@pavel118 .I am glad to help you.
In fact the advice given by SolomonovAnton is detailed and I would like to add some additional documentation on the subject, which I hope will be of help to you.
1.Configure Kerberos In Power BI Report Server

Configure Kerberos to use Power BI reports - Power BI | Microsoft Learn

Configure Kerberos authentication to support delegation so that users can automatically log on with their Windows credentials

You need to understand the common authentication methods in Power BI Rpoort Server and know the differences between them
The official recommendation is to use the Windows authentication method.

Authentication in a report server - SQL Server Reporting Services (SSRS) | Microsoft Learn

URL:
About Service Principal Names

I hope the following related issue is helpful to you.
URL:

Avoid login username and password prompt for Power... - Microsoft Fabric Community

I hope my suggestions give you good ideas, if you have any more questions, please clarify in a follow-up reply.
Best Regards,
Carson Jian

[SolomonovAnton]

Yes, you can configure domain (Windows) authentication in Power BI Report Server (PBIRS) to allow users to log in without entering a username and password, provided they are on the same domain and using a browser that supports integrated authentication.

Steps to Configure Domain Authentication in PBIRS:

1. Enable Windows Authentication in PBIRS:

   • Open the Reporting Services Configuration Manager on the server where PBIRS is installed.
   • Go to Web Service URL and Web Portal URL sections.
   • Ensure that Windows Authentication is enabled.

2. Set up Kerberos Authentication (if needed):

   • Kerberos allows for seamless authentication across servers without re-entering credentials.
   • Configure SPNs (Service Principal Names) for the PBIRS URL if it’s running under a domain service account.
   • This step is optional but might be necessary if your setup involves multiple servers or if users still get prompted.

3. Configure Internet Explorer or Edge to Allow Integrated Authentication:

   • In Internet Explorer or Edge, go to Settings > Internet Options > Security > Local Intranet.
   • Add your PBIRS server URL to the Local Intranet zone.
   • Ensure that Automatic logon only in Intranet zone is enabled.
   • This step may vary for other browsers, but similar options are often available.

4. Modify Group Policies (if applicable):

   • Use Group Policy to push these browser settings across your organization if required.
   • Go to Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page.
   • Add the PBIRS URL to the Intranet Zone for seamless authentication.

5. Check Firewall and Network Settings:

   • Ensure that the users’ systems are connected to the same network domain and that no firewalls are blocking the necessary communication ports.

With these steps, users accessing PBIRS on the same domain should be automatically authenticated without needing to enter their credentials each time.

[pavel118]

I understand correctly that after creating the SPN you need to configure delegation in the report server service account.