Cannot access analysis server via ssms

Question

I don't have the firewall on. I am an "analysis services admin" I am getting the below error. Is there something I am missing?

TITLE: Connect to Server

---

Cannot connect to asazure://australiasoutheast.xxxxxxxxxxxxxxxxx

---

ADDITIONAL INFORMATION:

Unable to obtain authentication token using the credentials provided. (Microsoft.AnalysisServices.AdomdClient)

---

AADSTS50187: Failed to perform device authentication.
Trace ID: 0d56a6e4-6a85-4202-89b4-ffc574b90600
Correlation ID: 97d6acc6-2d3f-44b2-8355-63041a626014
Timestamp: 2022-03-09 23:27:45Z (Microsoft.IdentityModel.Clients.ActiveDirectory)

---

The remote server returned an error: (400) Bad Request. (System)

---

BUTTONS:

OK

---

Answer 1

Hey,
Can you please try the below steps mentioned in the link https://learn.microsoft.com/en-us/analysis-services/client-libraries?view=asallproducts-allversions#download-the-latest :

Check installed versions
OLEDDB (MSOLAP)

1. Go to C:\Program Files\Microsoft Analysis Services\AS OLEDB. If you have more than one folder, choose the higher number.
2. Right-click msolap.dll > Properties > Details. Check the Product version property. Note: If the filename is msolap140.dll, it's older than latest version and should be upgraded.
   AMO
3. Go to C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.AnalysisServices. If you have more than one folder, choose the higher number.
4. Right-click Microsoft.AnalysisServices > Properties > Details.
   ADOMD
5. Go to C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient. If you have more than one folder, choose the higher number.
6. Right-click Microsoft.AnalysisServices.AdomdClient > Properties > Details.
   Manually update
   Client libraries are typically installed and updated automatically along with tools and client applications that use them. However, in some cases client libraries may not be updated automatically and each must be manually updated. To update manually, download and run the Windows Installer (.msi) package for each client library.
   To download and update
7. Click:
   https://go.microsoft.com/fwlink/?linkid=829575
   https://go.microsoft.com/fwlink/?linkid=829578
   https://go.microsoft.com/fwlink/?linkid=829577
8. In Downloads, click a Windows Installer Package to run Setup.
9. In Setup, click Next.
10. Read the license agreement. If you agree, select I accept the terms in the license agreement, and then click Next.
11. Click, Install.
12. When completed, click Finish.
    Post Update the version must be 15.1.37.40 (MSOLAP) and 18.7.0.1 (AMO and ADOMD) or higher.

You need to Update Analysis Services client libraries version 15.1.37.40 (MSOLAP) and 18.7.0.1 (AMO and ADOMD) or higher

Answer 2

Thanks for all the suggestions... but Microsoft came back with this as the issue.

Access was blocked by conditional access policy(CAP) - Baseline - Grant - BYOD - Windows 10.
This CAP required compliant device for devices are not hybrid AAD joined. This CAP was evaluated during your logon.

AAD knows the device information via AzureAD PRT on the device if your client App can leverage AzureAD PRT, like Excel or browser. That’s why you can assess the resource through Excel.
However, it seems like SSMS client does support AzureAD PRT. That’s why AAD will block the sign-in when you have device-based CAP configured.

We have below workaround to exclude the client APP from the CAP:

1. Go to conditional access policy blade and find the policy: Baseline - Grant - BYOD - Windows 10.
2. In Cloud apps or actions, client exclude and add the Azure Analysis Service APP.
3. Save the change.