Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
2 years ago

invalid credentials when using windows account

powerbi sso says invalid credentials when using windows authentication method to on-premise data gateway to access our HANA server despite of configuring HANA to accept SSO via SAML (this is tested in on-premise data gateway to HANA side and is already passing the SSO) to us it appears its the powerbi that is not parsing the credentials properly to data gateway in order to communicate to HANA. does anyone else have the same scenario and were able to connect the 3 stack together?

case:
- using SAML for SSO configured in HANA (windows account ####@ourdomain.com mapped to HANA local credentials)
- an on-premise data gateway installed in a separate VM and is domain joined ready and will do the communication/bridge from powerbi to hana (instead of allowing users from powerbi to do direct query)
- powerbi service (web powerbi) as frontend tool of end users(BI/BA analyst and developer)

Tips and Tricks

1 Reply

  • Anonymous's avatar
    Anonymous
    Not applicable
    2 years ago

    Hi Anonymous ,

     

    Check that the gateway is set to use SAML for SSO for SAP HANA.

     

    To use SAML, you must establish a trust relationship between the HANA server for which you want to enable SSO and the gateway. In this case, the gateway is used as a SAML identity provider (IdP). This relationship can be established in several ways. SAP recommends using CommonCryptoLib to complete the setup steps.

     

    SSO uses Windows authentication, so make sure that the Windows account has access to the gateway computer. If you are not sure, make sure that NT-AUTHORITY\Authenticated Users (S-1-5-11) is added to the Local Computer Users group.

     

    Ensure that this account has access to the private key of the SAML certificate used for SSO.

     

    See the "Configure the gateway" section in the "Configure the gateway and data source" section below.

    Use Security Assertion Markup Language for SSO from Power BI to on-premises data sources - Power BI | Microsoft Learn

     

    If credentials are still rejected, consider enabling server-side authentication tracing on the SAP HANA server to diagnose credential issues.

     

    See the "Troubleshoot using SAML for single sign-on to SAP HANA" section below.

    Use Security Assertion Markup Language for SSO from Power BI to on-premises data sources - Power BI | Microsoft Learn

     

    If you have any further questions please feel free to contact me.

     

    Best Regards,
    Yang
    Community Support Team

     

    If there is any post helps, then please consider Accept it as the solution  to help the other members find it more quickly.
    If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!