We’re glad to announce that it is now possible to use Single Sign-On, leveraging Kerberos, when connecting to certain data sources using DirectQuery mode from Power BI.


When a user interacts with a DirectQuery report in the Power BI Service, each cross-filter, slice, sorting, and report editing operation can result in queries executing live against the underlying on-premises data source.  When single sign-on is configured for the data source, queries execute under the identity of the user interacting with Power BI (that is, through the web experience or Power BI mobile apps). Thereby, each user sees precisely the data for which they have permissions in the underlying data source – with single sign-on configured, there is no shared data caching across different users.


Please note that you will need the latest On-premises data gateway release bits in order to use SSO. After installing those bits, this new option can be configured under “Advanced Options” in the Data Source registration page for On-premises data gateway sources.



You can find more details about how SSO works and what configuration steps are needed in this documentation article: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-kerberos-for-sso-pbi-to-on-premises-data/


Support for Single Sign-On is available for the following data sources as of today:

  • SQL Server
  • Teradata
  • SAP HANA (please read note at the end of this blog post)


Additional data sources will be added to this list between now and end of 2017 including Impala, Oracle and SAP BW. Others, such as Spark, will come early in 2018. As usual, please submit your feature requests on this area in the Power BI Ideas forum for future consideration.


Note regarding SAP HANA SSO support: In order to enable SSO on top of SAP HANA, you will need to apply a couple of HANA-specific fixes from SAP:

    1. Upgrading SAP HANA server with SAP’s HANA Patch 122.13, released by SAP at the end of October 2017.
    2. On the gateway machine, installing SAP’s latest HANA ODBC driver.  Minimum version is HANA ODBC version from August 2017.