t26mb (t26mb) asked a question.
We have a .NET core application that uses Microsoft identity for the authentication. The application contains a Power BI report (Embedded , User Owns Data). The Power BI report is protected with Azure AD (only the selected users can access the report). Earlier we were using Azure AD for authenticating both the app and the Power BI report. With Azure AD alone, everything is working fine. Now we have a requirement to use Okta as the authentication mechanism for the app.
So the user will logs in to the application using Okta and once logged in, the user should be able to view the Power BI report (that uses Azure AD as the authentication mechanism). We've successfully implemented Okta integration, but when we access the Power Bi report , we are getting an error "MsalUiRequiredException: No account or login hint was passed to the AcquireTokenSilent call."
Is this implementation possible? If yes, is there any proper documentation regarding the same? Thanks.
Hi @t26mb (t26mb) , Thank you for reaching out to the Okta Community!
There is currently no out-of-the-box implementation for this type of deployment.
If your users can successfully sign in to Azure from Okta, then the flow is no longer in Okta's purview and all relevant setting should be reviewed on the Azure/Power BI sides.
That being said, depending if you use MFA or not, the following might be required:
https://help.okta.com/en-us/Content/Topics/Apps/Office365/Use_Okta_MFA_Azure_AD_MFA.htm
In addition to that, past experience with active sessions has taught me to be mistrustful of browsers so perhaps test the flow with a different browser or an incognito tab as well to see if it reacts the same.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.