Authenticate with G Suite

hi again v-robertq-msft 

I wanted to update you on my progress as well as ask a few more questions...

Firstly, you CAN indeed authenticate into app.powerbi.com using Google G Suite - this is achieved using Direct Federation https://docs.microsoft.com/en-us/azure/active-directory/external-identities/direct-federation

I had setup my federation with my org's G Suite account, then invited my google user into my Azure Ad tenant (using the B2B flow) - my google user was sent an email - asking them to accept the invitation and that seemed to all work fine (this logged the user into https://myapps.microsoft.com/ - NOT app.powerbi.com)

I could not figure out how to force the Power BI Service to use an external IdP to authenticate into app.powerbi.com - this was extremely frustrating as I was so close.

So I logged into Power BI Service using my other (non-google) Office 365 account, created a Power BI App - and then shared the App with my Google User (added them on the "app publish" screen)

I then attempted to provide the direct app link:

https://app.powerbi.com/Redirect?action=OpenApp&appId=APP_ID&ctid=TENANT_ID

to the google authenticated user

This also failed - the login flow did not recognise my google domain account.

However, something VERY strange happened next, when I manually navigated to app.powerbi.com - I was bounced to the traditional Microsoft "account chooser" screen - (e.g. which account do you want to login as) - and to my surprise - my google account session was lised as "logged in"

So I clicked that account, and I was successfully logged in to the app!!!

I verified this by looking at the account details, and I can 100% confirm that I was logged in with my google user account into the Power BI Service.

My outstanding question is that most microsoft applications have a direct URL for logging in using an IdP - what is that URL for the Power BI Service?? I cannot find it documented anywhere.