Prompt for Windows Authentication when accessing report folders/reports

  • So there is a lot of talk of turning off the prompt for accessing reports, I want to turn it on.

    Right now we have a report that users can access via Windows Authentication (the data source of the report is stored so is not relevant here). What we would like to do is have the user be able to change the windows account they are using when accessing the report. For example, user does not have access to the report or folder in ssrs. When they go to the url, we would like to have a prompt to let them enter those AD credentials (which will be different from the one they logged into their workstation with).

  • jcourtjr 29296 - Wednesday, October 11, 2017 8:36 AM

    So there is a lot of talk of turning off the prompt for accessing reports, I want to turn it on.

    Right now we have a report that users can access via Windows Authentication (the data source of the report is stored so is not relevant here). What we would like to do is have the user be able to change the windows account they are using when accessing the report. For example, user does not have access to the report or folder in ssrs. When they go to the url, we would like to have a prompt to let them enter those AD credentials (which will be different from the one they logged into their workstation with).

    If you are using IE, then you can't have a different user log in as the credentials are automatically passed over using integrated security. If, however, you are using a different browser (for example Firefox, Chrome), then a dialogue box will be presented, as they do not support integrated security.

    If, however, IE is the only option, you'll need to run IE as a different user. To do so hold shift and right click the IE icon, then select Run as different user (as shown below). You'll then be presented with a Windows login dialogue, where you can enter a different user's credentials

    Thom~

    Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
    Larnu.uk

  • Thom A - Wednesday, October 11, 2017 8:56 AM

    jcourtjr 29296 - Wednesday, October 11, 2017 8:36 AM

    So there is a lot of talk of turning off the prompt for accessing reports, I want to turn it on.

    Right now we have a report that users can access via Windows Authentication (the data source of the report is stored so is not relevant here). What we would like to do is have the user be able to change the windows account they are using when accessing the report. For example, user does not have access to the report or folder in ssrs. When they go to the url, we would like to have a prompt to let them enter those AD credentials (which will be different from the one they logged into their workstation with).

    If you are using IE, then you can't have a different user log in as the credentials are automatically passed over using integrated security. If, however, you are using a different browser (for example Firefox, Chrome), then a dialogue box will be presented, as they do not support integrated security.

    If, however, IE is the only option, you'll need to run IE as a different user. To do so hold shift and right click the IE icon, then select Run as different user (as shown below). You'll then be presented with a Windows login dialogue, where you can enter a different user's credentials

    I guess I should have said that we looked at that already and decided that it wouldn't be good for the users to be required to do that...

    Anything else???

  • jcourtjr 29296 - Wednesday, October 11, 2017 9:01 AM

    I guess I should have said that we looked at that already and decided that it wouldn't be good for the users to be required to do that...

    Anything else???

    Not easily. Like I said, Internet Explorer/Edge uses Integrated Security, it's designed to "work" with applications/Services using it. You can build alternate Authentication methods for SSRS, however, this means losing integrated security and requires a lot of custom configuration.

    Is "Run as a different user" or using a different browser really that hard? They are much simpler options that having to "hack" the SSRS configuration.

    Thom~

    Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
    Larnu.uk

  • I know, but the users are lets say, technologically challenged...

  • jcourtjr 29296 - Wednesday, October 11, 2017 9:20 AM

    I know, but the users are lets say, technologically challenged...

    Then your "best" option is to look at an alternate solution to Windows Authentication. As I said, this is not a quick or easy task. You'll need to look up guides on the internet for this (although someone here might know where you could find one). You'll need to ensure you follow a tutorial for the version of SQL you have, as every edition is different, and if you ever upgrade, you'll need to do the whole thing all over again, but with the new tutorial.

    Personally, though, I would issue training to the staff. And if they don't get it, train them again. If they can't "do their job" because they still "can't do it" it's either because they have no intention to, or they'll soon learn how to right click while holding shift when they get bored and tired of moaning.

    Thom~

    Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
    Larnu.uk

  • Not sure if this works for you but maybe create a shortcut that does the RunAs that the users use for SSRS. They get prompted for the password but if you add /savecreds switch they would only need to do it once. I'd try to figure out something with this or right clicking on IE to do runas. Or figure out something else for the report and whatever you are trying to accomplish with the alternate login
    I did try removing the Enable Windows Authentication setting in IE but that didn't prompt me for anything.

    Sue

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply