How to implement alternative authentication for SSRS users to overcome browser restriction on basic auth

Question

Hi, Using SQL server 2016 reporting services (SSRS) we allow authentication using basic auth from third party users who are not on our Active Directory; they are provided with access credentials that correspond to an AD account and they access via their browser. The basic auth is encrypted over TLS.
A new security measure being implemented by the third party means that browser security settings are blocking all forms of basic auth (regardless of TLS). This results in no login box being presented when trying to access SSRS and the users being unable to access. Has anyone been able to successfully replace the basic auth with a custom authentication extension that provides an embedded login form that still accesses the same back-end AD permissions (that would be via basic auth). Or even any SAML integration options with Azure AD (that don't need domain trust). There are various suggestions of custom authentication options https://learn.microsoft.com/en-us/sql/reporting-services/security/configure-custom-or-forms-authentication-on-the-report-server?view=sql-server-ver16 to achieve this, but a single workable solution hasn't yet been identified.
Many thanks in advance, Pete

Answer 1

Hi @Peter Pollis You can refer to the SSRS 2016 custom authentication example here, I hope this will help you. https://github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample2016 Best regards, Aniya