Embed power bi report within our custom web application which already uses OIDC/OAuth2.0

[ranjithchev]

Hello

We currently have our web app (Single Page Application) built using React and for authn/authz we have our own custom IDP which is OIDC/OAuth2.0 compliant. Our website uses the Authorization Code grant flow for the login flow.

Now, as a new requirement we want to embed few Power BI reports within our web app as 'user owns data'. Please forget about the SSO part which we will take care using okta O365 integration. Now, the question is, for Power BI embed to work we will have register our web app with Azure AD and then get the application_id/client_id and other details as per the documentation. We will also have to implement code that will authenticate with Azure AD and get back an access_token for Power BI embedding to work. Can you please help explain if this architecture can work?

Thanks
Ranjith

[Hei_aQing]

HI @ranjithchev 

I've done some digging in the forums and official documents and there doesn't seem to be anything that explores this aspect of the question in more depth.

Power BI Security - Power BI | Microsoft Docs

Power BI security white paper - Power BI | Microsoft Docs

It is recommended that you also consult directly with an engineer here to see if this is feasible.

Azure Support Options | Microsoft Azure

H