Logging out of embedded app.powerbi.com when loggi...

PatLong · ‎11-19-2020

We have an ASP.NET web site that is secured against our Azure Active Directory. A part of this website has an embedded PowerBI report. That is embedded using an iframe and a url similar to this

https://app.powerbi.com/reportEmbed?reportId=<REPORTIDHERE>

We have a Sign out link in the main hosting web page that will sign the user out of the WebSite. However because the user would have had to login into power bi to see the embedded report within the IFRAME that session remains active.

What is the recommended approach for using the "secure" embed of a PowerBI report and logging a user out of a website AND power BI.

If we cannot fix this we end up with a situation like the following:

1. User A logs into oursite.com

2. User A goes to oursite.com/embeddedreportpage and sees the IFRAME and a Sign In button within it. This is the PowerBI sign in

3. User A signs into PowerBI and can see report

4. User A is finished on the site and presses our Sign Out link.

5. User B wants to use the machine sp signs into our site.

6. User B goes to oursite.com/embeddedreportpage and sees the IFRAME populated with the report which is authenicated as User A

The only way for user A to clear his PowerBI session is to visit app.powerbi.com and press Sign Out.

v-janeyg-msft · ‎11-23-2020

Hi, @PatLong

It’s my pleasure to answer for you.

According to your description,I think you can set a PBI Sign out button to avoid this situation.You can remind users that they need to sign out first then exit page.

Like this:

<html>
<body>
<a href="https://app.powerbi.com/Signout"> Sign Out</a>
<br />
<iframe width="1140" height="541.25" src="https://app.powerbi.com/reportEmbed?reportId=xxx" frameborder="0" allowFullScreen="true"></iframe>
</body>
</html>

If it doesn’t solve your problem, please feel free to ask me.

Best Regards

Janey Guo

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

PatLong · ‎11-23-2020

I am sure we all agree that having a user "sign out" is a good thing when the data is sensitive. Sometimes certain business scenarios mean that users are sharing a Windows or Mac login. So the browser sessions would be shared.

We would obviously encourage seperate Windows or Mac desktop but we also have a "Sign out" link in our app.

Your solution is a SECOND signout link, meaning the page has two "Sign out" links and the hope that the user clicks on both right? You can see how we might think of that as "not great"

v-janeyg-msft · ‎11-23-2020

Hi, @PatLong

I just gave a thought. There are many creative ideas that can replace this button with different ways, such as a prompt in 'sign out', whether to log out of the PBI login at the same time, etc.

Best Regards

Janey Guo

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Logging out of embedded app.powerbi.com when logging out of parent page

Helpful resources

Power BI Monthly Update - September 2024

Microsoft Fabric & AI Learning Hackathon

Fabric Community Update - September 2024