Forum Discussion
how to embed power bi report in php application without second authentication
5 Replies
Hello Hadi14
To embed a Power BI report in a PHP application without requiring secondary authentication, you can implement the “Embed for your customers” (App Owns Data) solution using Azure Active Directory (AAD) service principals.
https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-sample-for-customers
I don't want to use Azure.
Hi Hadi14
To enable seamless authentication for embedded Power BI reports in your web application using Active Directory (AD), you need to configure Windows Authentication and Kerberos Delegation. Since your Power BI Report Server (PBIRS) is hosted on your organization's domain controller, you can leverage Single Sign-On (SSO) to allow users to access embedded reports without re-authenticating. First, ensure that PBIRS is configured to use Windows Authentication (NTLM or Kerberos) by checking the settings in Reporting Services Configuration Manager. Next, if your web application is hosted on IIS, enable Windows Authentication and disable Anonymous Authentication to pass user credentials automatically. If the web application and PBIRS are on different servers, you must configure Kerberos Constrained Delegation (KCD) by setting up Service Principal Names (SPNs) for both the web server and PBIRS in Active Directory and allowing delegation for the application. Additionally, ensure that your web application correctly passes user credentials using the fetch API with credentials: 'include', allowing the browser to send authentication tokens automatically. You may also need to adjust browser settings for NTLM authentication in Chrome, Edge, or Firefox. If your application is external or on a different domain, consider using a reverse proxy (such as NGINX) or Azure AD Application Proxy to enable SSO. This setup ensures that users authenticated within the organization’s network can seamlessly access embedded Power BI reports without additional login prompts.
hi Poojara_D12
thank you very much for reply. I followed the steps but it always returns to the web portal. Even though the report address is correct
i dont know how to fix it.
we have Active Directory in our organization.
i want to use it. Is this possible?
