Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
Anonymous
Not applicable

Two factor authentication

Hi there,

 

To increase security is there any way to use two factor authentication to the BI Service?

 

Many thanks in advance.

 

P

1 ACCEPTED SOLUTION
GuyInACube
Microsoft Employee
Microsoft Employee

Authentication is done via Azure Active Directory. You have several options for multi-factor authentication.

 

Using ADFS:

https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-get-started-adf...

 

Multi-factor authentication Azure service:

https://azure.microsoft.com/en-us/services/multi-factor-authentication/

 

You can also get to this within the Office 365 Admin portal by going to Users > Active Users > More > Setup Azure multi-factor auth in the new O365 Admin portal.

 

https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-8f0...

 

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube

View solution in original post

9 REPLIES 9
GuyInACube
Microsoft Employee
Microsoft Employee

Authentication is done via Azure Active Directory. You have several options for multi-factor authentication.

 

Using ADFS:

https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-get-started-adf...

 

Multi-factor authentication Azure service:

https://azure.microsoft.com/en-us/services/multi-factor-authentication/

 

You can also get to this within the Office 365 Admin portal by going to Users > Active Users > More > Setup Azure multi-factor auth in the new O365 Admin portal.

 

https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-8f0...

 

Adam W. Saxton | Microsoft Employee | Business Intelligence
@GuyInACube | youtube.com/guyinacube

There´s a problem when I´m trying to publish one pbix file into our tenant, and I´m 100% sure that is because of MFA. As we are Microsoft Partner, we need MFA now in all our users BUT my app is not working anymore and I´m really desperate in what to do.

 

        protected static void AdquireTokenAcesso(string usuario, string senha, string ClientID)
        {

            // create new ADAL authentication context 
            var authenticationContext = new AuthenticationContext(ProgramConstants.AzureAuthorizationEndpoint);

            System.Net.ServicePointManager.SecurityProtocol = System.Net.ServicePointManager.SecurityProtocol | System.Net.SecurityProtocolType.Tls12;


            var userCreds = new UserPasswordCredential(usuario, senha);

            var userAuthnResult = authenticationContext.AcquireTokenAsync(ProgramConstants.PowerBiServiceResourceUri,
                                                                          ClientID, userCreds).Result;
            Console.WriteLine("Adquirindo Token de Acesso...");

            AccessToken = userAuthnResult.AccessToken;

            Console.WriteLine("Usuário: " + userAuthnResult.UserInfo.DisplayableId);
        }

namespace Microsoft.IdentityModel.Clients.ActiveDirectory
{
    // Summary:
    //     Extension class to support username/password flow.
    public static class AuthenticationContextIntegratedAuthExtensions
    {
        // Summary:
        //     Acquires security token from the authority.
        //
        // Parameters:
        //   ctx:
        //     Authentication context instance
        //
        //   resource:
        //     Identifier of the target resource that is the recipient of the requested
        //     token.
        //
        //   clientId:
        //     Identifier of the client requesting the token.
        //
        //   userCredential:
        //     The user credential to use for token acquisition.
        //
        // Returns:
        //     It contains Access Token, its expiration time, user information.
        //
        // Remarks:
        //     This feature is supported only for Azure Active Directory and Active Directory
        //     Federation Services (ADFS) on Windows 10.
        public static Task<AuthenticationResult> AcquireTokenAsync(this AuthenticationContext ctx, string resource, string clientId, UserCredential userCredential);
    }
}​



Message: {"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000009-0000-0000-c000-000000000000'.\r\nTrace ID: 3793b357-9420-4f9e-9a19-44073b8a1200\r\nCorrelation ID: 3edc0be6-8c6a-41f0-a37a-010e05ae2a01\r\nTimestamp: 2019-10-31 13:16:16Z"}

Any help @GuyInACube?

 

@brunozanoelo Were you able to solve this issue? I am also getting similar error after multi factor authentication is enabled.

Any idea how to disable multi-factor authentication by default?

Hello @piper!

Yeah, I solved this situation disabling the default securitu parameter in azure:

I seens Microsoft enables it without permission or consent time to time (this is ridiculous, it´s my enviroment), must pay attention on it.

https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview

brunozanoelo_0-1705671292616.png


Plus, disable the MFA in the user and should be fine!

Best regards!

Tengo el mismo problema, cual fue tu solucion?

It looks like in Powerbi.com (or office365) provide the two factor authenticiation features. But how about on-prem Power BI report server? Anybody has idea about how to implement two factor authentication?

ankitpatira
Community Champion
Community Champion

@Anonymous I don't think it is possible currently. You can submit it as idea but a lot of people would also argue against it.
Anonymous
Not applicable

Thanks for the reply.

 

How about through an Office 365 subscription, could that work?

 

Thanks again.

There´s a parameter in Azure Active Directory who enable the login.

Helpful resources

Announcements
Europe Fabric Conference

Europe’s largest Microsoft Fabric Community Conference

Join the community in Stockholm for expert Microsoft Fabric learning including a very exciting keynote from Arun Ulag, Corporate Vice President, Azure Data.

AugPowerBI_Carousel

Power BI Monthly Update - August 2024

Check out the August 2024 Power BI update to learn about new features.

August Carousel

Fabric Community Update - August 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors