Forum Discussion
Resolver IIIssues with Active Directory/MFA in Power BI Service
Resolver IIUPDATE: we disabled MFA for the Power BI Service temporarily to see if it would have any effect on the issue. It did not. Even with MFA turned off, we are still unable to validate any email addresses, configure RLS, or access the Admin Portal.
FURTHER UPDATE: It appears to be an ancillary service that is causing the issue. Turning off MFA for Power BI Service accomplished nothing, but briefly turning off MFA for all of our cloud apps resolved it. This would seem to indicate that there is a service that Power BI uses for communicating with Azure AD that ran afoul of our MFA policies. However, I'll note again that this problem did not begin occurring until two days ago -- everything was working perfectly fine before then.
We're going to look into Azure Traffic Manager and Azure CDN to see if they could be what's blocking us.
Helper IHi!
Did you ever find out what did this? We're experiencing the same issues in PowerBI Service.
- Admin Portal is spinning
- Can't manage gateways
- Can't check settings for datasets
- failed to load resource with server responding with status 400
This all worked fine untill some time after implementing MFA (a few months back).
Weird thing is that it works some times, but often not (and obviously never works when you really need it to..)
Would be great to hear if you found anything!
- pdbenbow
Vegard1985 , I suggest talking to your cybersecurity colleagues and analyzing any conditional access policies your organization might have in place through your identity provider (which I assume is Azure AD). Without getting into the gory details, Microsoft does not play nicely with some of our policies. We were forced to tweak our security so that the Power BI application is now covered by not just one, but TWO conditional access policies. This means our Power BI users get two MFA prompts when they login, but it at least restores all application functionality.
- Vegard1985
pdbenbow , Ok, it sure does baffle me how this can be such a pain to set up - but thanks, I'll check in with our guys on this. Just for anyone's information, MFA was disabled entirely for my user (all apps) earlier today and everything in PBI Service is working as it should now.