G Suite federation into Azure AD and Power BI Service

Question

hi everyone, I have recently managed to setup direct federation between my Azure AD tenant and my organisations G Suite account using Direct Federation (https://learn.microsoft.com/en-us/azure/active-directory/external-identities/direct-federation)

I have invited a user into the AD tenant - which sent an invite (the acceptace of the invite worked) and now I can see the Google User in my list of AD users.

The documentation suggests that apps that support tenant URLs will allow authentication using external IdPs (such as google).

However, I cannot find a canonical URL for app.powerbi.com that will allow me to authenticate using my Google G Suite IdP.

Having said that - there was an odd sequence of events that occured, which led my app.powerbi.com session to bounce me to the "account chooser" screen - to which my Google G Suite session was listed as "logged in" - so I clicked it and can 100% confirm that I was able to log in to app.powerbi.com using my Google account (so I know its possible)

Can anyone help me find out the definitive process for logging into the Power BI service using an IdP like google? I cannot find any documentation.

I am also posting a similar question on the Power BI forums - to which I will update here should I hear anything

Answer 1

From what similar posts online have said, Power BI doesn't directly support G-Suite integration, but there are some third party tools that allow this.

https://tray.io/connectors/microsoftpowerbi-gsuite-integrations

https://skyvia.com/data-integration/analyze-googleapps-with-powerbi

Microsoft also does have a Google Analytics connector for Power BI so I know that some level of communication is possible, but it doesn't appear to be documented at this moment on the Microsoft side.

It might be worth checking with the G Suite forum for this. https://productforums.google.com/forum/#!forum/apps

Answer 2

Hi Marilee - thanks for responding, but just to be clear, im not talking about a connector to google based services, Im talking about authentication into the power bi service - which (via direct federation) does seem to work as I can prove to be logged in to the Power BI Service using my G Suite credentials, but the pathway to doing this seems poorly (or not) documented...