SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Prompt for Windows Authentication when accessing report folders/reports


Prompt for Windows Authentication when accessing report folders/reports

Author
Message
jcourtjr 29296
jcourtjr 29296
Old Hand
Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)

Group: General Forum Members
Points: 389 Visits: 441
So there is a lot of talk of turning off the prompt for accessing reports, I want to turn it on.

Right now we have a report that users can access via Windows Authentication (the data source of the report is stored so is not relevant here). What we would like to do is have the user be able to change the windows account they are using when accessing the report. For example, user does not have access to the report or folder in ssrs. When they go to the url, we would like to have a prompt to let them enter those AD credentials (which will be different from the one they logged into their workstation with).
Thom A
Thom A
SSC Guru
SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)

Group: General Forum Members
Points: 74310 Visits: 19184
jcourtjr 29296 - Wednesday, October 11, 2017 8:36 AM
So there is a lot of talk of turning off the prompt for accessing reports, I want to turn it on.

Right now we have a report that users can access via Windows Authentication (the data source of the report is stored so is not relevant here). What we would like to do is have the user be able to change the windows account they are using when accessing the report. For example, user does not have access to the report or folder in ssrs. When they go to the url, we would like to have a prompt to let them enter those AD credentials (which will be different from the one they logged into their workstation with).


If you are using IE, then you can't have a different user log in as the credentials are automatically passed over using integrated security. If, however, you are using a different browser (for example Firefox, Chrome), then a dialogue box will be presented, as they do not support integrated security.

If, however, IE is the only option, you'll need to run IE as a different user. To do so hold shift and right click the IE icon, then select Run as different user (as shown below). You'll then be presented with a Windows login dialogue, where you can enter a different user's credentials



Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does :-P

Please always remember to encapsulate your code in IFCode Markup. For example [code=sql] [/code].
Click here to read Jeffs Guide on how to post SQL questions, and get swift and helpful answers from the community
jcourtjr 29296
jcourtjr 29296
Old Hand
Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)

Group: General Forum Members
Points: 389 Visits: 441
Thom A - Wednesday, October 11, 2017 8:56 AM
jcourtjr 29296 - Wednesday, October 11, 2017 8:36 AM
So there is a lot of talk of turning off the prompt for accessing reports, I want to turn it on.

Right now we have a report that users can access via Windows Authentication (the data source of the report is stored so is not relevant here). What we would like to do is have the user be able to change the windows account they are using when accessing the report. For example, user does not have access to the report or folder in ssrs. When they go to the url, we would like to have a prompt to let them enter those AD credentials (which will be different from the one they logged into their workstation with).


If you are using IE, then you can't have a different user log in as the credentials are automatically passed over using integrated security. If, however, you are using a different browser (for example Firefox, Chrome), then a dialogue box will be presented, as they do not support integrated security.

If, however, IE is the only option, you'll need to run IE as a different user. To do so hold shift and right click the IE icon, then select Run as different user (as shown below). You'll then be presented with a Windows login dialogue, where you can enter a different user's credentials

I guess I should have said that we looked at that already and decided that it wouldn't be good for the users to be required to do that...

Anything else???

Thom A
Thom A
SSC Guru
SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)

Group: General Forum Members
Points: 74310 Visits: 19184
jcourtjr 29296 - Wednesday, October 11, 2017 9:01 AM

I guess I should have said that we looked at that already and decided that it wouldn't be good for the users to be required to do that...

Anything else???

Not easily. Like I said, Internet Explorer/Edge uses Integrated Security, it's designed to "work" with applications/Services using it. You can build alternate Authentication methods for SSRS, however, this means losing integrated security and requires a lot of custom configuration.

Is "Run as a different user" or using a different browser really that hard? They are much simpler options that having to "hack" the SSRS configuration.



Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does :-P

Please always remember to encapsulate your code in IFCode Markup. For example [code=sql] [/code].
Click here to read Jeffs Guide on how to post SQL questions, and get swift and helpful answers from the community
jcourtjr 29296
jcourtjr 29296
Old Hand
Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)Old Hand (389 reputation)

Group: General Forum Members
Points: 389 Visits: 441
I know, but the users are lets say, technologically challenged...
Thom A
Thom A
SSC Guru
SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)SSC Guru (74K reputation)

Group: General Forum Members
Points: 74310 Visits: 19184
jcourtjr 29296 - Wednesday, October 11, 2017 9:20 AM
I know, but the users are lets say, technologically challenged...

Then your "best" option is to look at an alternate solution to Windows Authentication. As I said, this is not a quick or easy task. You'll need to look up guides on the internet for this (although someone here might know where you could find one). You'll need to ensure you follow a tutorial for the version of SQL you have, as every edition is different, and if you ever upgrade, you'll need to do the whole thing all over again, but with the new tutorial.

Personally, though, I would issue training to the staff. And if they don't get it, train them again. If they can't "do their job" because they still "can't do it" it's either because they have no intention to, or they'll soon learn how to right click while holding shift when they get bored and tired of moaning.



Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does :-P

Please always remember to encapsulate your code in IFCode Markup. For example [code=sql] [/code].
Click here to read Jeffs Guide on how to post SQL questions, and get swift and helpful answers from the community
Sue_H
Sue_H
SSC Guru
SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)

Group: General Forum Members
Points: 62753 Visits: 13325

Not sure if this works for you but maybe create a shortcut that does the RunAs that the users use for SSRS. They get prompted for the password but if you add /savecreds switch they would only need to do it once. I'd try to figure out something with this or right clicking on IE to do runas. Or figure out something else for the report and whatever you are trying to accomplish with the alternate login
I did try removing the Enable Windows Authentication setting in IE but that didn't prompt me for anything.

Sue




Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum








































































































































































SQLServerCentral


Search