On-premise Power BI Report Server to On-premise SAP HANA SSO / SAML connection
Dears, we have an On-premise Power BI Report Server and On-premise SAP HANA. Would anyone guide to establish a connection with proper SSO / SAML configuration ? Kindly note: we have searched already and most of the links lead to Power BI cloud / service which is not our scenario. Thank you in advance.
SAML SSO from Power BI to HANA on cloud
Hello, In my organization we connected Power BI to a HANA database in cloud (in SAP CP). To achieve this we put in the middle a SAP Cloud Connector (SAP CC). It works perfectly but... We needed to add SSO (using SAML) to propagate the user to the database so we could apply our security privileges on the data for each user. We followed the guide to setup SSO (SAML) from Power BI to HANA but when I we tested a report that uses this configuration it didn't work. Guide: https://docs.microsoft.com/en-us/power-bi/service-gateway-sso-saml In the Power BI Gateway log I see these messages: DM.EnterpriseGateway Error: 0 : 2019-08-27T16:56:40.2205171Z DM.EnterpriseGateway 34362901-f01b-424a-9ae8-0e9510364300 16f95e75-ab83-0fa9-cc75-9f618e20c44e MDSR 16f95e75-ab83-0fa9-cc75-9f618e20c44e b9d649e9-a791-4276-9992-b88d811c90f3 b9d649e9-a791-4276-9992-b88d811c90f3 DDD37E27 [DM.GatewayCore] Error processing request: [0]Microsoft.PowerBI.DataMovement.Pipeline.Diagnostics.SAMLAssertionCertificateCanNotBeFoundException: Can not find SAML assertion certificate. GatewayPipelineErrorCode=DM_GWPipeline_Gateway_SAMLAuthenticationCertificateCanNotBeFound GatewayVersion=3000.5.185 Additionally, I'm using another product similar to Power BI in the same way (SAP Analytics Cloud) and it works perfectly so I don't think it could be a HANA setup problem. Indeed the error says that the SAML Assertion Certificate couldn't be found, but I don't understand what it means as I did exactly what the mentioned guide indicates. In Power BI Service, when I test a report that uses this data source, the error says: Cannot load model Couldn't load the model schema associated with this report. Make sure you have a connection to the server, and try again. Please try again later or contact support. If you contact support, please provide these details. Activity ID: 1176d00d-b757-4d9a-8b7a-28aae6f73adb Request ID: 94bb42c3-4d51-f9b7-1c0b-623ff9709006 Correlation ID: b8479191-b6c0-a55a-b690-66e2ee720e87 Time: Tue Aug 27 2019 15:04:41 GMT-0300 (Argentina Standard Time) Version: 13.0.10537.179 Cluster URI: https://wabi-south-central-us-redirect.analysis.windows.net In Power BI Gateway, when I go after the error to check what happened I see the error: DM.EnterpriseGateway Error: 0 : 2019-08-27T16:56:40.2205171Z DM.EnterpriseGateway 34362901-f01b-424a-9ae8-0e9510364300 16f95e75-ab83-0fa9-cc75-9f618e20c44e MDSR 16f95e75-ab83-0fa9-cc75-9f618e20c44e b9d649e9-a791-4276-9992-b88d811c90f3 b9d649e9-a791-4276-9992-b88d811c90f3 DDD37E27 [DM.GatewayCore] Error processing request: [0]Microsoft.PowerBI.DataMovement.Pipeline.Diagnostics.SAMLAssertionCertificateCanNotBeFoundException: Can not find SAML assertion certificate. GatewayPipelineErrorCode=DM_GWPipeline_Gateway_SAMLAuthenticationCertificateCanNotBeFound GatewayVersion=3000.5.185 And in Power BI Desktop I don't have any problem to create anything to HANA (but I'm not using this SSO so it's ok). Can you help me to understand what "Can not find SAML assertion certificate" means and how I could solve it? Meanwhile I've created a ticket to the Support team. I will complete this post if a find the solution.
SAML SSO for HANA DB
Greetings friends, needing a Microsoft Engineer/employee or general expert to confirm my initial findings: For PBI Server, I was told by Microsoft several weeks back that AD/Kerberos SSO is my only option when using a HANA DB. Does everybody agree ? (My organization really would prefer to use SAML SSO against HANA, but that SAML functionality only exists in the Gateway, to be used with PBI Service) If question #1 is true, then is SAML SSO (against a HANA DB) scheduled to be implemented on the PBI Server development horizon any time soon ? If PBI Server SAML SSO (against a HANA DB) will not be implemented any time soon (or ever) and we use AD/Kerberos, do you know if "keytabs" are used by PBI Server ? Thanks for any and all input !
(SAML) for single sign-on (SSO) from Power BI to on-premises data sources
Hello All, I am Sagar Hoskeri, My organization uses Power-BI using SAP HANA as data source and we are now planning to implement SAML for SSO. We are referring to below documentation posted on Microsoft site however it mentions the steps using OpenSSL, and the guide doesn't list steps for SAML using CommonCryptoLib rather it just mentions to Refer to the official SAP documentation for further information. docs.microsoft.com/en-us/power-bi/service-gateway-sso-saml We don't use OpenSSL for our HANA Database and rather use Commoncrypto, and we contacted SAP to check on the same however they asked us to check with Microsoft.. Is there any separate documentation to implement SAML for SSO using CommonCryptoLib or any plans to create one ? Appreciate any assistance in this regards. Thank you !