Skip to main content

Power BI

New

Add AAD Service Principal as a method of authentication

Vote (44) Share
Jourdan's profile image

Jourdan on 14 Jul 2016 04:28:16

We have a number of custom applications that support authentication via Azure Active Directory. We would prefer to use Service Principals instead of full blown user accounts to authenticate.

Another scenario would be connecting to the Microsoft Graph as a Service Principal. We could grant the Service Principal read access to parts of the directory we want and then use that Client ID and Secret to authenticate against MS Graph. It would be great to use this data in Power BI.

To implement this, it would require Power BI to connect to the authentication endpoint (like https://login.windows.net) and request a bearer token to use against the data endpoint.

Comments (5)
Jourdan's profile image Profile Picture

ab2456f3 b532-ea11-a810-000d3a8f075c on 06 Jul 2020 00:17:49

RE: Add AAD Service Principal as a method of authentication

Would be ideal to have this in Power BI desktop as well.

Jourdan's profile image Profile Picture

5ad6b942 d3a1-475d-879d-5ea89bb21329 on 05 Jul 2020 23:41:58

RE: Add AAD Service Principal as a method of authentication

This is in preview now, right?

https://docs.microsoft.com/en-us/power-bi/developer/embed-service-principal

Jourdan's profile image Profile Picture

86123c8f c944-41cc-bbaf-1c5351d091d0 on 05 Jul 2020 23:36:00

RE: Add AAD Service Principal as a method of authentication

When Service Principals support available for most of the Azure Services, this is a must.

Jourdan's profile image Profile Picture

b1600952 d001-4954-b5d7-bd23bff326a0 on 05 Jul 2020 23:34:14

RE: Add AAD Service Principal as a method of authentication

Please! Having to create dummy users for this purpose seems to be a step backwards and complicates licence management.

Jourdan's profile image Profile Picture

574fc0bd ea12-4865-927b-45c30547b68e on 05 Jul 2020 23:27:02

RE: Add AAD Service Principal as a method of authentication

This should not be even an option, this is a must feature. I hope you add this feature as quick as possible.